last executing test programs: 6.517305507s ago: executing program 1 (id=1214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0xffff, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x66, 0x5, 0x81, 0x6, 0x0, @multicast2, @local}, {{0x4e20, 0x4e21, 0x41424344, r2, 0x1, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x2, {[@eol]}}, {"68bd896b"}}}}}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x7, 0x6) write$tun(r0, &(0x7f00000003c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x17}, @mpls={[{0x861c}, {0x8001, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv4=@tcp={{0xa, 0x4, 0x0, 0x0, 0x1058, 0x68, 0x0, 0x9, 0x6, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x13, 0x2f, [@rand_addr=0x64010102, @broadcast, @local, @multicast1]}]}}, {{0x4e22, 0x4e24, r2, r3, 0x0, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9, {[@fastopen={0x22, 0x5, "99b359"}, @md5sig={0x13, 0x12, "f58d37610d367165a6ef968d57931321"}, @sack_perm={0x4, 0x2}, @eol]}}, {"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"}}}}}, 0x1076) 5.99588635s ago: executing program 2 (id=1218): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)=r0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000004085000000820000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30) 5.838456464s ago: executing program 2 (id=1220): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x3, 0x2, {0xa, 0x4e22, 0x8, @mcast1, 0x3}}}, 0x32) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x6c, 0x7, 0x200000, 0x6, 0x8, 0x936, 0x7}, &(0x7f0000000180)=0x9c) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'wlan1\x00', {0x2, 0x4e22, @local}}) (async) getsockopt(r0, 0x4, 0x7, &(0x7f0000000200)=""/247, &(0x7f0000000300)=0xf7) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0x1, 0x8, 0xe, 0x7}, 0x20) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xb6a}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x4000810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='f2fs_file_write_iter\x00', r6}, 0x18) (async) socket$kcm(0x29, 0x5, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$packet(0x11, 0x2, 0x300) (async) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f00000005c0)={0xffffffffffffffff, 0x2, 0x4, "68e48cd27786b88af2908968348de923a15769060ab5f590474b727d0630a81857916d3d1745a69f228d0c72e8dd8f9a8a4ef0c694a1f4cce2e435757ccadb5ab55a69faefd52e577e166748a35c54f4d9f6626706717856021f2f1890285bd02d2acf49013a35eb3449e9f11e08099738504db38dcab3533133b70cb8bd2b5302be08efbc578e383051c25e3619d252a36190c47cf16c0bc86badb4053c5731db0220418a2d710c2bae27987a0e0526e1dc387faedfff5b6c03aee94a6eacd4e73647ae1f8b095d183d723cd80a6a0bdea25849e0c66ee45644a4e64abbf7880f85485191ee5145ca25"}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r9}, 0x4) (async) close(r8) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x4) sendmsg$inet(r7, &(0x7f0000000a80)={&(0x7f0000000740)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000780)="a27752465bbd3265b03f5edfce51788b1788aef8cf6d848c76d0d41c05ef4be1585244c67c00c54fea7c733122a3c094ff48d2fb709a5a5858f66c3ab4a18ff18b8f3eb1757c3319424b3901ab684db792c40280db7045205711e96ef82406a7c64de7f6bba1c47c", 0x68}, {&(0x7f0000000800)="3c412974834cc630d0e5d8829a9f89d4a02fdabe4d3ef672c055af9e233cbfd9ccb72aa745d1b9394fe4da9b3fb833349afe8322f44e641740", 0x39}, {&(0x7f0000000840)="17c99a60ed91726e3dee5f58ecbd29", 0xf}, {&(0x7f0000000880)="cbda68049457c98b6fc4ce2c10feeca33738397d66d57dc995b07f03e0137a721b7aff6b70ae611062e2303ea72cd1af46a6de854d7a17ba305dc0ea61feade84562cb4d838e2828aedb232e3a9d0bab4a68576b4cf4246c485f6477fecc7b570abf6ed1a94ab1cb88154237", 0x6c}, {&(0x7f0000000900)="be2386be84ea7b1d59de0bcfb80d8a2e84776697d27a0cc69eb53e6343bb0cd75f899e8491450ecd08d035", 0x2b}], 0x5, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @multicast2}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000ac0)={@multicast2, 0x0, 0x0, 0x30, 0x0, [{}, {@empty}, {@initdev}]}}) (async) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000b40)=0x6, 0x4) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000d40)={r6, 0x0, 0x90, 0x0, &(0x7f0000000b80)="f20332bae0cb63b428d63cbaa8230b4306b49954b8e0d1f9da379666b23d5f1b599e552ca8950bec068efdc5e1c84fe6a1b85d809c6b3f497b1a69aab9b1b1bd27a5c3f7819e42172e06e5f8a33debdbd2cbdfb916ff21ed5322312f375702a7e5d50c8003597d77b5d2da854a79a3704fe03e0317c152707601470dd2002ae2c94a504671cf0dcde843f4fd5f14479a", 0x0, 0x1d6, 0x0, 0xe2, 0x0, &(0x7f0000000c40)="40d57f0fea40e1aeb1445b17919b066939e561ffa9250485709bfa2d893ce74c1c8b713ef3346f35e654db62f83f3a21f38993af17d1d6cc8c245db8ae212c5d5f91970299465d4b34988d29a2db28b8dbdb7b4574d951bf0a20d51c49fec638e9bae1e457ada464525f989daef1346b4b0e881faedc05764ff8eab1b13c37c276c58e4953e60254f290c678368098fe7356407ef589c29f6f0e66f879e587454630fa7bc6d2099607c198dc09a65993e3040aa642242b6594234f6d5c6b9ee373b1d20b417f339c574e7ee42c31ec3fc6686871d4687c639fa231825c5e8b3045f6", 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000dc0)) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x0, 0x0, 0x6, 0x0, "b03d6404bb130b3f122fc3ddaf8d8fc55faa1b05c969a66af02a8291de9c6b4163c0fb692e04bde9301c94de552a5405ce6bfca564cdbbfbb64fd16e32640b3fd9a47f09a481d50ba82608ab3ca5fbee"}, 0xd8) 5.816294445s ago: executing program 1 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d, 0x0, 0x4, 0x8001}, {0x4d}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback={0xfec0ffffffffffff}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) 5.63960771s ago: executing program 2 (id=1222): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa0}, 0x49004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0xbfa8be5ef523b773, 0x70bd25, 0x25dfdbfd}, 0xfffffe7f}, 0x1, 0x0, 0x0, 0xc010}, 0x20000880) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=@newae={0x12bc, 0x1e, 0x2, 0x70bd29, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0xa, 0xcc}, @in6=@private0, 0x81, 0x3506}, [@sec_ctx={0xdb, 0x8, {0xd7, 0x8, 0x0, 0x2, 0xcf, "4a69f889b6bd4b1d26b4d0e49cd85cd5b3ff592e3156da69d7d267b4bb46d793c8cd92eeddebd8d8ec0218666bb57a842408021c0512c5ac1cf82e9ad23943de97a8c3fc4d34b5e171cba0f9d752ef25553c9d2b73d3b1823b11d20d3932b4d27ee4773b7c7d865447053b51737ef0e82cda5c07f640bf365bcc52b5272c1e45aa98903dee2d71508e775b885a62939a3e23d28c2e7f3d51dab1097f472f08d9e513d578c2e5960033cd8b601157ca04d91af0fe2a4572e63ee0f6a2649279f95d70f3128b149b03681f0fb1e88797"}}, @etimer_thresh={0x8}, @tmpl={0xc4, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0xf9}, 0xa, @in6=@empty, 0x0, 0x2, 0x3, 0x75, 0x7, 0xad40}, {{@in=@private=0xa010102, 0x4d6, 0xff}, 0x2, @in=@broadcast, 0x7, 0x0, 0x2, 0x10, 0x4, 0x1, 0x5}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x32}, 0xa, @in=@empty, 0x34ff, 0x4, 0x1, 0x3, 0xe, 0xa21, 0x591d}]}, @algo_auth_trunc={0x6f, 0x14, {{'sha224-arm64\x00'}, 0x118, 0x100, "439c248313b65267080fce038da7ff823dbc543370fcd0950daca11f5c4775b55723e7"}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x0, 0x9, 0x1000, "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"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @lastused={0xc, 0xf, 0xda3}, @mark={0xc, 0x15, {0x35075c, 0x8}}, @replay_thresh={0x8, 0xb, 0x8}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in=@loopback, 0x0, 0x2}}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x1}, 0x44) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="00faff0f0001eeff7f6faf9a1e4d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.463731323s ago: executing program 1 (id=1225): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) (async, rerun: 64) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) bind$packet(r3, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x800, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000400)=ANY=[], 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r6 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x840000000002, 0x3, 0xff) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000001c0), 0x4) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r9, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@local, 0x78, r9}) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 5.043647746s ago: executing program 2 (id=1230): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b80)="1a", 0x1}, {&(0x7f0000000080)="e3278a96324fdefe2cf901cbb03606c15658e384d4d047f454d1c2d931bcbf7a82891e0608852c9fd5389fe966995d1833c375902f9a6c9c9e015a18a94b4d9f49b374ccf3d17109c88dbe21617d949f82040a7361d0b4819b2f5c77e7be0ef07add1344032f8a154a52b7501d761fe0da6894ccb74c6571e073e14f1d77", 0x7e}, {&(0x7f0000000200)="b0fe6a7d4ad96f8559d9cd2b25b3bc3ca36c5e9e649f527e61a92ca2f32f8c891babf76feedf17f8f883a78efe1f51696a26a4ac5af19c0bf7bb095aaad99c0fc7073bcdc0318ddb1b08eb99074857992735a2d0cad5ceec8eeee367c2693d3d4a4eae4786d8b9ca789eeccf03e37529477297cf2adc9dcc4af2502e05ed8c7da1d23a032b0f21b0bd5766b83111620658d2a466d7a0329d6bddd0474590f3b73254c7d245161833bf99e239", 0xac}], 0x3, &(0x7f0000000140)=[@op={0x18}], 0x18}], 0x1, 0x4044) recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x160, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000003440)=[{{&(0x7f0000000400)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, 0x0}}], 0x1, 0x20000010) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x29, @empty, 0x0, 0x0, 'sed\x00', 0x0, 0x6, 0x7b}, 0x2c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) 4.804317429s ago: executing program 2 (id=1233): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000003c0)=0xffff, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB="3c00090050e30104000efffffbffffffff000000", @ANYBLOB="110000000030442bbc1b00000057faed23a6c8c7d4568f6b505900", @ANYRESDEC=r3], 0x3c}}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 4.713105346s ago: executing program 3 (id=1234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000040)="e0b9547ed393dbc4abc89b6a5b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.541563874s ago: executing program 3 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000005dbce8e5b69b143c00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r5}, 0x10) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xb) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xb) listen(r4, 0x0) r6 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r8, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x1b}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000000000000000a14000000000a01020000000000000000010000002c00000008000000007bea000000020000000900010073797a30000000000c0005400000000000000004140000001000010000000000000000000500000a000000000000"], 0x68}}, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101) (async) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101) 4.540955239s ago: executing program 2 (id=1237): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000100)=0xfffffffffffffde1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000020000103000000000002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYRESOCT, @ANYBLOB="8c7251f44a6a98c687ffaa8a55cf572eef7176fc639964c59cdab0fadeaecb730e41acff483dd98c59b4ee88ec999a67918d1336c34d9353df96f219cac2ae77649ab9dd222e1f3a15230a5a74b76f65ab859208b74f99ab66eaed5b80", @ANYBLOB="ffa219e41cb3d1fe0924ccd11b0ac3be9e21b8d6c529180e895ce8f08f03498bf0865319e9ba887631b2f8f0d487efe240ed3733348f299198e958154e5834df22e814f73318e9eb845e53b6f56292924bafab817b6c1d2bcc73575813ed18fecf40e44c7c5dfdb9206dcb5fabb1d3f7a68151a07c06f3b2eeea472eed0e4c456fb8578246e04fa760263f47a1909f053b0d528f460e486aa896d6514ac98a4c03ade3c8bb57252220e47343431acfdd4664819ea601a6ad3b0e3f5121da4aa38340be51c87179b4536696c9bae5a6445a2f4972a745016a8845f01787926ce03cfdc2bd1b2e1e73138f"], 0x28}}, 0x8000) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x804600}, 0xc, &(0x7f00000006c0)={&(0x7f0000000c40)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf25120000000c0099000100000046000000d000be0012ffc69b6e4f49ae91593260c4dee8bf97847430a7c0eb477c155e1f30cf252daa141e0daa0d1a7e2f2d6ee2fd161359f4a2cfda77ad6cdf0d7149446afc00edd2775a4526e0e8135448f345a021ddc23b460040c7e16410b1d1e931a38beb707100dffec5c318c1aa2f52dc516b24aeab2d7795291faedb8fffacc34c0b2b7c20551b60e8ef8b8af025bb096b1f6be6a559e4cb05a0f572f4be1f81b6ff964d92752bf16c4c0c4bd0f4ceba0000000000000000000000335f55b41a2b24a162f8987e187e318ef6e2e0d0074d595ef58fdad65af87e93673ee0886ca4a09874489f24361541357feddba7f3d9d2c2fee7fc7c43a588cb7f5fbfec018686b297aa355c0ea71e25e91ed481898e1f796b442f0404861a226814fe35e43715625f8c70e7c848d2f6af1556861c5a170d73ff694a059e431e8dc37708bf19cd2ccff9716b9f969f7fca370af30aa2b662774ed9a1232bcc437eff751d64d3a1acda2f81a7025cd6e695c5214ace67ab29f9c8541dc7ebef3a1af7ea161571045332d3a60d9e46", @ANYRES8=r0, @ANYRESDEC], 0xf0}, 0x1, 0x0, 0x0, 0x20008855}, 0x13e0971e9273a0ce) connect$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0xfffffffffffffea3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00'}) mmap(&(0x7f000088d000/0x1000)=nil, 0x1000, 0x7000007, 0x10, 0xffffffffffffffff, 0x8981d000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x44044) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x10, 0x2, 0x0) connect$rxrpc(r4, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) 4.327012181s ago: executing program 3 (id=1239): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000002000000180004801400018009000100ce594e757ff27a39648ee666000000000400028014000000110001000000e6e8afdf5c000000000a00"/92], 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r2, 0x8921, &(0x7f00000001c0)="943a") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x4040006) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="0a000000000000000000ffff0000000009000200737983027b3300000500010007000000280007800c00018008000140ffffffff050006e449a2c636a08adbe66f253bbdfbc0e6d2175db335c60fe85e1a9cf1b65a88f71dc222d8fc7e6b5d8c517b79858e6628959dc06ae8f8b7b68f43befbe07788277c2d5ddcf6776380601d1bb12df829c119553ac994ac45978d13a512b267ced9afd41f"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2000d811}, 0x4000080) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000840)=0x4) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x40000020) r8 = socket(0x8, 0x3, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r9, 0xc000003b, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, [@map_fd={0x18, 0x2}, @jmp={0x5, 0x0, 0xb, 0x1, 0x0, 0x50}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1ff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x20000000, 0xa6, &(0x7f00000005c0)=""/166, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x5, 0x9, 0xc}, {0x2, 0x5, 0x2, 0xa}, {0x1, 0x5, 0xa, 0x9}, {0x0, 0x4, 0x10, 0x9}, {0x1, 0x4, 0xb, 0x1}], 0x10, 0xc039}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000007c0)=r11, 0x4) ioctl$IMGETCOUNT(r8, 0x40106183, &(0x7f0000000000)) read$alg(r8, &(0x7f0000000300)=""/145, 0x91) 3.380106471s ago: executing program 3 (id=1244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000080000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000006c000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x71}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) 3.247959996s ago: executing program 3 (id=1246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000040)="e0b9547ed393dbc4abc89b6a5b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.242473593s ago: executing program 1 (id=1247): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000047c0)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x48010) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_timeval(r4, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000140)="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", 0xfc) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback, 0xffffffffffffffff, 0x10, 0x24}, 0x20) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000002c0)={0x6, &(0x7f0000000240)=[{0x7fff, 0x0, 0xc}, {0xe000, 0xa, 0x52, 0x93}, {0x6, 0x4, 0x81, 0x4f53}, {0x3ff, 0xe, 0x6, 0xd}, {0x4, 0x1, 0xd, 0x10001}, {0x7, 0x9, 0x5b, 0x2}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 3.125584856s ago: executing program 3 (id=1250): unshare(0x68040200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, 0x0, 0xf000) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='vlan1\x00', 0x10) write(r1, &(0x7f0000000340), 0x11000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16=r4, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r5 = socket(0x15, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6f, 0x11, 0x0, @empty, @multicast1}, {0x1, 0x4e20, 0x8}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) getsockopt(r5, 0x200000000114, 0x2721, 0x0, &(0x7f00000000c0)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080), 0x0) socketpair(0x1e, 0x80000, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r8) socket$inet6_sctp(0xa, 0x801, 0x84) 2.976405213s ago: executing program 1 (id=1252): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000640)=@generic={0x1, 0x7ffffffffffffffd, 0x3}) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) 1.965626514s ago: executing program 1 (id=1259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000d030000000500000000000003"], 0x0, 0x4e, 0x0, 0x4}, 0x28) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r8, &(0x7f00000002c0)=[{&(0x7f00000000c0)="60b772204a47", 0x6}, {&(0x7f0000000080)="0bc3", 0x2}, {&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x3) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000280)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r11, 0x5452, 0x0) close(r11) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.871268369s ago: executing program 0 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x43, 0x0, &(0x7f0000000040)="e0b9547ed393dbc4abc89b6a5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.767711738s ago: executing program 0 (id=1262): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e21, @loopback}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x24, 0x34, @random="82454b2183279ebc511eeeb02f891fb356dda72ebe6e0519617bffe305e5812a"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x40080) sendfile(r1, r0, &(0x7f00000001c0)=0xe, 0x96a0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000200)=0x7ff80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_out(r0, 0x2, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x48, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r5, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={r0}) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x3fa, 0x100, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20040081) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000740)={0x0, 0x8}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000007c0)={r8, 0xfffd, 0x10, 0xee52, 0xb6}, &(0x7f0000000800)=0x18) syz_emit_ethernet(0x104, &(0x7f0000000840)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@generic={0x892f, "ddfbdc4960f87f7abea1925f070547d21e89161a40a802ddae8134ffe8e6a4c7da6ae4305baaef55eee27267dfc0caf8a0fc4efe3944d071be7790cd72d760668c026897f835c4050ab0d4a86caee9f6ac8b93bc0352738917a5f08fbc88e12db8fb7be456a1c4010d906112a0e2e0b591e1f62e177858cb685fdfcb43ffb04639b75e89e9bb19f12b34600169e8c836698f21c341ae041a5ef0bc1078267851b938919c2178413bda1ff43b197f20acb9eda34ce5ef5cc9fa7d7de48ec7068435198ef0f9a8442086ecb07346f728d8c17f9f9602b6285d888e44705d7a6b129780241fe03ee598c7038917a6c14242e2a2"}}}, 0x0) connect$pptp(r7, &(0x7f0000000980)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)={0x264, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c00}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @loopback, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x173}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00'}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdf}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf66, @private0, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x478d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) ppoll(&(0x7f0000000d00)=[{r3, 0x40}, {r9, 0x20}, {r3, 0x8002}, {r10, 0xf044}, {r6, 0x8}], 0x5, &(0x7f0000000d80)={r11, r12+10000000}, &(0x7f0000000dc0)={[0x7f]}, 0x8) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000f80)={'gre0\x00', &(0x7f0000000e80)={'syztnl0\x00', r4, 0x700, 0x10, 0x3, 0x10000, {{0x2e, 0x4, 0x2, 0x9, 0xb8, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x3b, 0x1, 0xf, [{@empty}]}, @timestamp_prespec={0x44, 0x2c, 0xcc, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe53}, {@multicast2, 0x8}, {@broadcast, 0x6}, {@multicast2, 0x7f}, {@private=0xa010101, 0x40}]}, @generic={0x82, 0x3, "94"}, @ssrr={0x89, 0xf, 0xe7, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp_prespec={0x44, 0x54, 0x54, 0x3, 0x3, [{@rand_addr=0x64010102, 0x80000000}, {@broadcast, 0xe06}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x7}, {@remote}, {@multicast2, 0x5}, {@private=0xa010102, 0x80000000}, {@multicast2, 0x726}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f00000011c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={0x1ac, r13, 0xd00, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0xc0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x531449182d20ef3a}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xc804}, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000001200)=0xf, &(0x7f0000001240)=0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000001280)={@private0={0xfc, 0x0, '\x00', 0x1}, r4}, 0x14) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f00000012c0)={0x0, 0x8000000000000000}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001340)=""/33, 0x21}, {&(0x7f0000001380)=""/23, 0x17}], 0x2, &(0x7f0000001bc0)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0xa44}, {&(0x7f0000001400)=""/66, 0x42}, &(0x7f0000001b00)=[{&(0x7f0000001480)=""/210, 0xd2}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001640)=""/251, 0xfb}, {&(0x7f0000001740)=""/149, 0x95}, {&(0x7f0000001800)=""/119, 0x77}, {&(0x7f0000001880)=""/48, 0x30}, {&(0x7f00000018c0)=""/120, 0x78}, {&(0x7f0000001940)=""/159, 0x9f}, {&(0x7f0000001a00)=""/230, 0xe6}], 0x9, 0x5, 0x28}}], 0x48, 0x1}, 0x1) 1.655156945s ago: executing program 4 (id=1263): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000000c0), 0x8) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r4, &(0x7f0000000180)=0xffffffffffffffff, r2, 0x0, 0x4, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x3ff, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xffff}, {0xfff3, 0xfff1}}, [@TCA_CHAIN={0x6, 0xb, 0x126}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008000) 1.533665035s ago: executing program 0 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000005c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x2, 0x14}, @ipv4=@igmp={{0x5, 0x4, 0x1, 0x31, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @empty}, {0x22, 0x2, 0x0, @multicast2}}}, 0x2a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x807ff, 0x46}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000001ac0)=""/7, &(0x7f0000005bc0)=0x7) socket$netlink(0x10, 0x3, 0xa) 1.474186224s ago: executing program 4 (id=1265): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f00000004c0)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e000000000000d403f88aefc7c2d572f3be8fb2c8496f93b35fb2", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) close(r1) 1.271537432s ago: executing program 4 (id=1266): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000180)=0x16, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010029bd7000fddbdf25010000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040054) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11}, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@dev, 0x1, 0x33}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x13c}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0)=r5, 0x12) sendto$netrom(r2, 0x0, 0x700, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$nl_route_sched(r12, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)=@deltaction={0x24, 0x31, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044005}, 0xc002) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003001000000000000200001302000000010000000000000000000000010000000000000000000000006100"], 0x0, 0x3f, 0x0, 0x9}, 0x28) 1.098908513s ago: executing program 4 (id=1267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x675c, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000010c0)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x1, 0x1014}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000c00)='fsi_master_gpio_in\x00', r4, 0x0, 0x2}, 0x18) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c00000000d74c07c09c26386e9cbe6960bc620df84a66ea7e521f1f4a828a6a9cb258ed6b8e2f533fe9aecdbb705268b31ef6fccb5c132c9031c52c3a27e050ebdc3ba4444253030aa3d15659171441833b29fafd8cf0400f7eba370c5f94eed9dd262022ff98eb5f9d2e1f5a81f5", @ANYRES32=0x0, @ANYBLOB="0000007863616e0000000400028008000a4000000000000a0000001100000000", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 842.487497ms ago: executing program 0 (id=1268): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000002c0012800b00010067726574617000001c0002800800040009000000080001009d00669afee68ce762023d4fe1a2ac045f95"], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 590.149791ms ago: executing program 4 (id=1269): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000101850000002e000000850000007d00000095000000000000004a43008e6b81ac78df2a6bcfc861033e41d8df342fd5128d7f3280362cbb46ccc36fda92a9f797c1b58f0da7137269b9de5b6568e1398e3d0589b1b36a1a582dc80e8b7c2df4df5dda875b7bcacf1e3bd8038eb520e90d529307bf5569ad6e2b585fd92fa141e89ec2c198c32f9de389eb33fccf32270c4caee41db9186f630dd24454204b9dc266524b09a6943bb590080cb0acc39bd2f0771bf02d1ae521e04474ebdebfd29c0212661b2ce8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86812164b8886c3588ed6", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x60, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x2c}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0xaf0a, 0x5, 0x1a6, 0x5, 0x10, 0x6, 0x7}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r4, @ANYRESHEX=r4, @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRES64=r4, @ANYRESOCT=r4, @ANYBLOB="cf1afe1ec307a63be7775a48d7371d92fcc54ef4413c61fb", @ANYRES16=r4, @ANYRESHEX=r4], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) 540.375241ms ago: executing program 0 (id=1270): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000028000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3400000041000800feffffffffffffff017c0000040042801c0001802b000e8000003f800000b38000002500", @ANYRES32=r0, @ANYBLOB="5d90fbcebe34d5af7eff81f6384c063481836e7627a3062800009e803f0c84df59f435e3d1d1c33579018b784d9ce64e629d562020e0ac30ff61441f1dbecf6faaec4e47f6aee6db94795b4cb1fdb8d31ebebc15b05d83605a9806b6300575171f320b12f1bb6859fcfce40084906d331bbe90df830b07c3f659c27f47a121ffc1544cab4713e64f41443b07284b10c131b369a442f60f30392c795b0b9b5b85df19e255e200003200", @ANYRES32=0x0, @ANYBLOB="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"], 0x5a}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='mm_compaction_end\x00', r1, 0x0, 0x4}, 0x18) unshare(0x2a020400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0xd84, 0x8, 0x2, 0x4, 0x4}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x50) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0xaf) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="0209000000000000000000000000000001000004005f9b00000000000000000000000000000000000000000000000060ca000000000300050000000000010000000006000000000002000000ac1e00010000000000000000153ffdd2310097fb7b611e86e471a4b219e9f2506c43431de529137b30fbdbb4bebdab897a8a6b334aedbc3c5e4d6275121a439d16369b326aa4039e95659d9c7ba0805d83de0b1c9501b3c3b1ae21015b8fb31f1cbe5e83df"], 0x68}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xd8}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'syzkaller1\x00'}]}, 0x30}}, 0xc0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x30, 0x0, 0x400, 0x0, 0x25dfdbfb, {{}, {0x0, 0x6}, {0x14, 0x19, {0x0, 0x0, 0x7}}}}, 0x30}}, 0xc4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r10, 0x9c3fa077fa966179, 0x70bd2b, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x15}}}}}, 0x20}}, 0x4000054) 503.430316ms ago: executing program 4 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x8883) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4040080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x50, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xf4, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0xc6, 0x8, "5d58f2004c7bf4ec08a6db65dfd98a41d70a50b5161d44b75aef1124d9c33a3e68ebf9094ae2f6be469219a4702a89152973f77dc83d25c1e271b0cfdca8f4aaf2937a70589cb7bb73f2eb2314b6eb29af694f05d39da931625ad1f0e554be7ac77b508174849e9f66bda01c8d1c43a6379b93f16fe62c569e5e4d7e96eebadc85cea87050d7be5975743de66c051a0e49aef27eccbc25996c0f5ff70c52a314f272895630b1e0337f60d8de080766a66e660b4b9a04f2440e71f2a8901e8a39a819"}, @NFTA_OBJ_USERDATA={0x4}]}, @NFT_MSG_DELSETELEM={0x6e8, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6b4, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xec, 0xb, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4e}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x98}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xac}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0xdc, 0x6, 0x1, 0x0, "072147da8e62aa3fd81f58afd024835b515f39cf98ca049bf990ca3943f9d272c7b7db3f8599c77b6dbb2ba47e50eaa1c00019838d59a389b13f8fd43ea1242b1ed3e5e9f384fa3cfd7632e6a0fb2a26dfb337aa4fdf4ac7594944966ee34aede9a5a0d1b40b59d7c7017dd506c5aac7daed9687b923b202b036b75355a2ad809d01832fff2f38f70602bfffe10ef6c79b9855225fea896c08b9014b5950637b605ea9245f62ca26f81d39cff15f3d03723b944a258500fb866158c82bd363156c1dc8d862ad7ac0edaa5fd1eb3a02f2585acdcac5abb9fa"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_KEY={0x1c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "5c00e75154504637694e3e281c1aca1955bfbc6ed61d520299eadf1c4193059aa3"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x47, 0x1, "12da35bbc65abb140745108b78d29fb99992356750d8128a79e48db9540d129be6675eabb7cfbe10d8c863a2d8bcc6db9f727c5aed8acdf8ce901dec6de48d5fb96b7f"}, @NFTA_DATA_VALUE={0x94, 0x1, "64a65200ec8196557800024aac14eb31b658bc3e4325d048bea4194126afb41ffeb2fd6d068a28490e60e02015168ffa6f695e0d3f9accaba3f932ede55c146bb85cb0ebcc73b1cdd78386cc3184bf9515dd72e65e2c61239fdd31f4157487764435d51b4b9186e2418bd1f58f082ed6498dca1c8aff049576683e949f95704932be64a2716aabf583d8c2695c489078"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x22, 0x1, "29f2af780efde1e502d0e93f1a7b5a3dc1faf650ecec6c1504b544b160c7"}]}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x1f4, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x1b0, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1a4, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1a0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x77, 0x1, "d88a9ce7d93fc45ae4912b2d3734534f907d9df6aa025e675a906c548c59e9ee2fa528f545803e27add90d434aba5720bd9136a68f29d173bda2b16a983b9aa2a7c343afde4c2410ee56b7b7ee553e5c0012bc9efe246aab771e7eeea37a385e674b4169842c649a023672048766ea467ce593"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x12, 0x1, "c27568ad81be5536816ed0fb1926"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "a4b9f2b67968e6c306706283cc83340b565e46ff088c9ad890052f509aaae8afca1be4e47f9214625b85f36b5f3ad538af1a731d02d0a4eb12c2da65f49a5c6f9a96ca5103cf8aa5a713c9cf37008c50d2657f6edc8f986d01d9a818df29418218a9da3cb07cd576f5828169035b5c13e97e623bfdc507ead0a3e7291612e2bfafd6722973d6553e17"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x1a8, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x90, 0xc, "a6356c8a01c8050a9da6da164e280e9db83fc7e9ec1039ae6109d97a57325a3ebe94c9ea2757b1ba3eff16235c5a662bb854668f5095a55db5918ace300d996386835f6409b27ffc4fbdf476dc56acc1bb188ab3ab641da29913452ca8918b49541862031ead38127cd93bd118cd22095fbf852ee858e2120d6e55eeeaa8ca6902f85bfb6537c1a322f5fd0b"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_USERDATA={0x41, 0xc, "5a517d356d22b5a263278111d696f05f8f6b3d75fa289b4e90ffe4f459513e5f4f375362953c93094cdee966f4e9f67e06c85d04028c93a7ed9a2b494e"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x79, 0xc, "c6368006e7381b262336c97ee8a1893752cf58e938b5492f0eea7b93f754db3ec751a47e925bd55a6b2e700623dc856f00a9b89037baefb518a18d091b6f34a1f04526db2d8a8c104e30c756d59dcb0bb78ddad0a994ec8feaef327e9171a16cfde4577c93db31c67161e7a07a7f561aba3de73ea3"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xaa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4c084) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x40000100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0xb12}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r12, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000011c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0xc4, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}]}, @NL80211_ATTR_MESH_SETUP={0x64, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x53, 0x3, "3705338553f603afe7680ec5cad6eb5c81785d8f7c3a1a82196fedc3e2627eb67110ec87f7bcce583cad0e90c9348a4f2c2b0249e0d8d03c9408c09102ad653881cbd531e10e43b4c811e697285013"}]}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc000}, 0x4008005) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=1272): syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb07a24f79ee3f86dd60200000000c2f00fc090000000000000000000000000001ff0200000000000000000000000000010000883e000c907801000000"], 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000007140100000000000000000009"], 0x38}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eeb1948bf42bc7fc2cb274849c9524154fa24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a8684853abf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000400000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f500000010000000000944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a808000000000000000562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844892f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b57"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000680)=@base={0x6, 0x4, 0x3, 0xc758}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x68cf}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000040000000000000007711f3938504000027000000180100002069070000000000002020207b1af8ff00000000bfa100000000000007010000f8ef475c03eaffc9000000850000005000000095000000000000000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x43, 0x0, &(0x7f0000000040)="e0b9547ed393dbc4abc89b6a5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x21}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000580)={r7, 0x2, 0x390}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4d0246c370db626d"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4070}, 0x4000080) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x20, r9, 0x4, 0x70bd30, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x71}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r12 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x6}}) r13 = socket$kcm(0x2, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000ac0)={'wg2\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000100000218110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000014000000b7030000800000000000000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008e00000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x18, '\x00', r14, 0x25, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): active [ 92.465805][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.508670][ T5856] team0: Port device team_slave_0 added [ 92.559166][ T5849] team0: Port device team_slave_0 added [ 92.566518][ T5856] team0: Port device team_slave_1 added [ 92.594514][ T5853] hsr_slave_0: entered promiscuous mode [ 92.602222][ T5853] hsr_slave_1: entered promiscuous mode [ 92.641044][ T5849] team0: Port device team_slave_1 added [ 92.674929][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.682203][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.708225][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.725436][ T5847] hsr_slave_0: entered promiscuous mode [ 92.732340][ T5847] hsr_slave_1: entered promiscuous mode [ 92.738988][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.746732][ T5847] Cannot create hsr debugfs directory [ 92.804560][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.811901][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.838440][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.900695][ T5848] hsr_slave_0: entered promiscuous mode [ 92.907505][ T5848] hsr_slave_1: entered promiscuous mode [ 92.913992][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.922326][ T5848] Cannot create hsr debugfs directory [ 92.969445][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.976420][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.003280][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.016509][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.023868][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.050871][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.170663][ T5856] hsr_slave_0: entered promiscuous mode [ 93.178260][ T5856] hsr_slave_1: entered promiscuous mode [ 93.184429][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.192227][ T5856] Cannot create hsr debugfs directory [ 93.339953][ T5849] hsr_slave_0: entered promiscuous mode [ 93.346275][ T5849] hsr_slave_1: entered promiscuous mode [ 93.352658][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.360383][ T5849] Cannot create hsr debugfs directory [ 93.710909][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.738563][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.772827][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.794934][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.877798][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.888687][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.900475][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.911323][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.024045][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.064887][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.076096][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.092124][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.157739][ T5868] Bluetooth: hci3: command tx timeout [ 94.167461][ T5868] Bluetooth: hci4: command tx timeout [ 94.167840][ T5852] Bluetooth: hci2: command tx timeout [ 94.172895][ T5868] Bluetooth: hci0: command tx timeout [ 94.233255][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.240264][ T5868] Bluetooth: hci1: command tx timeout [ 94.273101][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.285949][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.313916][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.364398][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.392614][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.406584][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.429406][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.445570][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.461785][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.524954][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.572170][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.579647][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.619611][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.634330][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.641521][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.699793][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.707024][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.724050][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.742294][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.749510][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.846040][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.870153][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.877356][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.900347][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.933996][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.941268][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.982537][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.052846][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.085985][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.093320][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.140518][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.181315][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.188552][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.263327][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.270555][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.284494][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.291716][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.415129][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.600500][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.649248][ T5856] veth0_vlan: entered promiscuous mode [ 95.729636][ T5856] veth1_vlan: entered promiscuous mode [ 95.888622][ T5856] veth0_macvtap: entered promiscuous mode [ 95.924199][ T5856] veth1_macvtap: entered promiscuous mode [ 96.021230][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.048870][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.071497][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.132085][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.168934][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.185566][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.208602][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.232762][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.239858][ T5852] Bluetooth: hci3: command tx timeout [ 96.248080][ T5852] Bluetooth: hci2: command tx timeout [ 96.253540][ T5852] Bluetooth: hci4: command tx timeout [ 96.260747][ T5868] Bluetooth: hci0: command tx timeout [ 96.285478][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.318433][ T5868] Bluetooth: hci1: command tx timeout [ 96.431564][ T5847] veth0_vlan: entered promiscuous mode [ 96.450432][ T5847] veth1_vlan: entered promiscuous mode [ 96.526450][ T5849] veth0_vlan: entered promiscuous mode [ 96.536330][ T5853] veth0_vlan: entered promiscuous mode [ 96.551228][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.574278][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.591444][ T5848] veth0_vlan: entered promiscuous mode [ 96.603705][ T5853] veth1_vlan: entered promiscuous mode [ 96.617745][ T5849] veth1_vlan: entered promiscuous mode [ 96.628992][ T5848] veth1_vlan: entered promiscuous mode [ 96.658555][ T5847] veth0_macvtap: entered promiscuous mode [ 96.669580][ T5847] veth1_macvtap: entered promiscuous mode [ 96.715398][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.722262][ T5849] veth0_macvtap: entered promiscuous mode [ 96.729596][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.773635][ T5849] veth1_macvtap: entered promiscuous mode [ 96.801164][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.827171][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.844112][ T5848] veth0_macvtap: entered promiscuous mode [ 96.862883][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.873596][ T5853] veth0_macvtap: entered promiscuous mode [ 96.896695][ T5848] veth1_macvtap: entered promiscuous mode [ 96.922136][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.939245][ T5853] veth1_macvtap: entered promiscuous mode [ 96.951690][ T1104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.976712][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.021940][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.035982][ T1104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.046993][ T1104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.063365][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.086084][ T1104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.105531][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.120695][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.145627][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.156135][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.168766][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.183331][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.216565][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.248275][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.261243][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.299292][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.308361][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.353146][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.400986][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.410093][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.462412][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.474936][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.593737][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.608964][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.647425][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.655316][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.814273][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.825214][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.020909][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.048229][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.138591][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.144611][ T5984] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 98.146453][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.194937][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.209003][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.248016][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.268906][ T5984] bridge0: port 3(batadv0) entered blocking state [ 98.277494][ T5984] bridge0: port 3(batadv0) entered disabled state [ 98.284366][ T5984] batadv0: entered allmulticast mode [ 98.294268][ T5984] batadv0: entered promiscuous mode [ 98.304209][ T5984] bridge0: port 3(batadv0) entered blocking state [ 98.310975][ T5984] bridge0: port 3(batadv0) entered forwarding state [ 98.328329][ T5852] Bluetooth: hci4: command tx timeout [ 98.333800][ T5852] Bluetooth: hci2: command tx timeout [ 98.339505][ T5867] Bluetooth: hci3: command tx timeout [ 98.344976][ T5868] Bluetooth: hci0: command tx timeout [ 98.397268][ T5868] Bluetooth: hci1: command tx timeout [ 98.530794][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.581382][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.640038][ T991] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 98.649634][ T991] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 98.722120][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 99.412461][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.497372][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 99.813114][ T6008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.841669][ T6008] bond0: (slave bond1): Enslaving as an active interface with an up link [ 100.513237][ T6028] Zero length message leads to an empty skb [ 100.598401][ T6033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14'. [ 100.784277][ T6038] Bluetooth: MGMT ver 1.23 [ 101.176418][ T6045] netlink: 248 bytes leftover after parsing attributes in process `syz.2.15'. [ 101.312232][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17'. [ 101.314441][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17'. [ 101.401487][ T6050] ip6gretap0: entered promiscuous mode [ 101.416296][ T6050] ip6gretap0: left promiscuous mode [ 101.454040][ T6062] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 101.736315][ T6062] syzkaller1: entered promiscuous mode [ 101.753399][ T6062] syzkaller1: entered allmulticast mode [ 101.999344][ T6078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.422542][ T6099] macsec1: entered allmulticast mode [ 102.452300][ T6099] macvlan0: entered allmulticast mode [ 102.476031][ T6099] veth1_vlan: entered allmulticast mode [ 102.515010][ T6099] macvlan0: left allmulticast mode [ 102.527177][ T6105] Cannot find set identified by id 1 to match [ 102.545113][ T6099] veth1_vlan: left allmulticast mode [ 102.585755][ T6101] vlan0: entered promiscuous mode [ 102.682448][ T6112] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:0 [ 102.961667][ T6119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.31'. [ 102.969556][ T6114] can: request_module (can-proto-3) failed. [ 102.992857][ T6119] tipc: Started in network mode [ 103.012904][ T6119] tipc: Node identity ceb38a7fd5cf, cluster identity 4711 [ 103.028911][ T6119] tipc: Enabled bearer , priority 0 [ 103.054266][ T6121] syzkaller0: entered promiscuous mode [ 103.072027][ T6121] syzkaller0: entered allmulticast mode [ 103.221353][ T6119] tipc: Resetting bearer [ 103.256160][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 103.273470][ T6117] tipc: Resetting bearer [ 103.332159][ T6117] tipc: Disabling bearer [ 104.127557][ T6150] netlink: 'syz.1.36': attribute type 2 has an invalid length. [ 104.467419][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 104.653897][ T6165] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 104.814193][ T6182] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 105.500954][ T6205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.904567][ T6205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.170610][ T6222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.234287][ T6205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.257677][ T6229] syzkaller1: entered promiscuous mode [ 106.263283][ T6229] syzkaller1: entered allmulticast mode [ 106.294613][ T6238] netlink: 'syz.2.57': attribute type 12 has an invalid length. [ 106.355195][ T6222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.427758][ T6205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.480883][ T6222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.593976][ T6245] netlink: 'syz.4.58': attribute type 33 has an invalid length. [ 106.605255][ T6245] netlink: 152 bytes leftover after parsing attributes in process `syz.4.58'. [ 106.721616][ T6222] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.763275][ T6248] netlink: 'syz.4.58': attribute type 33 has an invalid length. [ 106.772941][ T6248] netlink: 152 bytes leftover after parsing attributes in process `syz.4.58'. [ 106.807090][ T2977] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.817897][ T991] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.836359][ T991] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.896254][ T991] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.975751][ T14] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.028612][ T6255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.038927][ T6255] team0: Port device bond2 added [ 107.056252][ T6256] vlan2: entered promiscuous mode [ 107.081702][ T6256] syz_tun: entered promiscuous mode [ 107.144321][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 107.269115][ T2977] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.400208][ T6259] batadv0: entered promiscuous mode [ 107.426112][ T6259] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.467746][ T6259] batadv0: left promiscuous mode [ 107.545021][ T11] IPVS: starting estimator thread 0... [ 107.573816][ T2977] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.661853][ T6278] IPVS: using max 34 ests per chain, 81600 per kthread [ 107.695947][ T2977] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.785503][ T14] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.809659][ T14] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.868077][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 107.911085][ T14] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.931690][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 107.942873][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 107.959149][ T14] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.968724][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 108.047403][ T6302] netlink: 'syz.2.70': attribute type 5 has an invalid length. [ 108.342791][ T6316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.73'. [ 109.124603][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 109.178241][ T6352] netlink: 'syz.4.84': attribute type 5 has an invalid length. [ 109.185856][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.84'. [ 109.294633][ T6352] geneve2: entered promiscuous mode [ 109.350585][ T6352] geneve2: entered allmulticast mode [ 109.437886][ T6369] sctp: [Deprecated]: syz.1.89 (pid 6369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.437886][ T6369] Use struct sctp_sack_info instead [ 109.498644][ T6372] IPv6: addrconf: prefix option has invalid lifetime [ 109.636898][ T991] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 109.679046][ T991] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 109.749238][ T991] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 109.788342][ T991] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 109.819600][ T6383] netlink: 56 bytes leftover after parsing attributes in process `syz.3.91'. [ 109.921055][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 110.014872][ T6384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.454970][ T6403] xt_hashlimit: size too large, truncated to 1048576 [ 110.507397][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'. [ 110.822363][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 110.871168][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 111.334898][ T6428] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.446561][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 111.500389][ T6452] netlink: 'syz.1.101': attribute type 2 has an invalid length. [ 111.564543][ T6428] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.681680][ T6452] : entered promiscuous mode [ 111.763409][ T6428] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.935792][ T6428] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.422293][ T6483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.461932][ T6443] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.478221][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 112.489756][ T6483] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 112.515509][ T1157] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.743212][ T1104] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.759509][ T1104] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.860271][ T6496] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 113.436039][ T6518] IPVS: persistence engine module ip_vs_pe_ not found [ 113.500757][ T6516] bridge0: port 3(batadv0) entered disabled state [ 113.507656][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.516335][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.730176][ T6527] __nla_validate_parse: 1 callbacks suppressed [ 113.730190][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.122'. [ 113.759866][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.789369][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 113.799530][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.101245][ T6538] netlink: 100 bytes leftover after parsing attributes in process `syz.3.124'. [ 114.214565][ T6445] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.226494][ T6539] warning: `syz.0.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.245818][ T6445] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.282864][ T6445] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.316330][ T6445] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.642177][ T6549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.128'. [ 114.872109][ T6570] Illegal XDP return value 3157860005 on prog (id 59) dev N/A, expect packet loss! [ 115.408068][ T6591] veth0_vlan: entered allmulticast mode [ 115.483624][ T6595] netlink: 208 bytes leftover after parsing attributes in process `syz.0.137'. [ 115.559245][ T6598] netlink: 'syz.1.139': attribute type 3 has an invalid length. [ 115.597278][ T6598] netlink: 'syz.1.139': attribute type 1 has an invalid length. [ 115.654944][ T6598] netlink: 192 bytes leftover after parsing attributes in process `syz.1.139'. [ 115.722946][ T6598] NCSI netlink: No device for ifindex 0 [ 115.793785][ T6591] syz.0.137 (6591) used greatest stack depth: 19928 bytes left [ 116.115956][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 116.481118][ T6618] bridge_slave_1: left allmulticast mode [ 116.535579][ T6616] syz.2.145: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.552723][ T6618] bridge_slave_1: left promiscuous mode [ 116.582766][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.588569][ T6616] CPU: 1 UID: 0 PID: 6616 Comm: syz.2.145 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 116.588604][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.588627][ T6616] Call Trace: [ 116.588637][ T6616] [ 116.588649][ T6616] dump_stack_lvl+0x189/0x250 [ 116.588692][ T6616] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.588726][ T6616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.588775][ T6616] warn_alloc+0x214/0x310 [ 116.588815][ T6616] ? __pfx_warn_alloc+0x10/0x10 [ 116.588859][ T6616] ? __get_vm_area_node+0x28f/0x300 [ 116.588888][ T6616] ? xskq_create+0xbf/0x170 [ 116.588922][ T6616] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 116.588989][ T6616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.589029][ T6616] ? __kasan_kmalloc+0x93/0xb0 [ 116.589059][ T6616] vmalloc_user_noprof+0xad/0xf0 [ 116.589089][ T6616] ? xskq_create+0xbf/0x170 [ 116.589119][ T6616] xskq_create+0xbf/0x170 [ 116.589150][ T6616] xsk_init_queue+0xb0/0x110 [ 116.589183][ T6616] xsk_setsockopt+0x57b/0x8d0 [ 116.589213][ T6616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 116.589239][ T6616] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.589268][ T6616] ? __lock_acquire+0xab9/0xd20 [ 116.589298][ T6616] ? aa_sock_opt_perm+0x74/0x110 [ 116.589333][ T6616] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 116.589373][ T6616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 116.589401][ T6616] do_sock_setsockopt+0x257/0x3e0 [ 116.589440][ T6616] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 116.589482][ T6616] ? __fget_files+0x2a/0x420 [ 116.589527][ T6616] __x64_sys_setsockopt+0x18b/0x220 [ 116.589569][ T6616] do_syscall_64+0xfa/0x3b0 [ 116.589600][ T6616] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.589629][ T6616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.589651][ T6616] ? clear_bhb_loop+0x60/0xb0 [ 116.589679][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.589702][ T6616] RIP: 0033:0x7fb36fb8e929 [ 116.589730][ T6616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.589749][ T6616] RSP: 002b:00007fb370a83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.589772][ T6616] RAX: ffffffffffffffda RBX: 00007fb36fdb5fa0 RCX: 00007fb36fb8e929 [ 116.589789][ T6616] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009 [ 116.589803][ T6616] RBP: 00007fb36fc10b39 R08: 0000000000000004 R09: 0000000000000000 [ 116.589816][ T6616] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 116.589829][ T6616] R13: 0000000000000000 R14: 00007fb36fdb5fa0 R15: 00007ffff6cc64c8 [ 116.589861][ T6616] [ 116.598382][ T6616] Mem-Info: [ 116.869051][ T6618] bridge_slave_0: left allmulticast mode [ 116.888797][ T6616] active_anon:5533 inactive_anon:0 isolated_anon:0 [ 116.888797][ T6616] active_file:1410 inactive_file:39831 isolated_file:0 [ 116.888797][ T6616] unevictable:768 dirty:274 writeback:0 [ 116.888797][ T6616] slab_reclaimable:10625 slab_unreclaimable:97232 [ 116.888797][ T6616] mapped:31395 shmem:1365 pagetables:1219 [ 116.888797][ T6616] sec_pagetables:0 bounce:0 [ 116.888797][ T6616] kernel_misc_reclaimable:0 [ 116.888797][ T6616] free:1326926 free_pcp:19946 free_cma:0 [ 116.946388][ T6618] bridge_slave_0: left promiscuous mode [ 116.962606][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.011953][ T6616] Node 0 active_anon:22068kB inactive_anon:0kB active_file:5640kB inactive_file:159124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125580kB dirty:1100kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12820kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 117.072711][ T6616] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 117.105913][ T6616] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.144590][ T6616] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 117.151187][ T6616] Node 0 DMA32 free:1401064kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22020kB inactive_anon:0kB active_file:5640kB inactive_file:157552kB unevictable:1536kB writepending:1100kB present:3129332kB managed:2558272kB mlocked:0kB bounce:0kB free_pcp:53296kB local_pcp:27528kB free_cma:0kB [ 117.184586][ T6616] lowmem_reserve[]: 0 0 1 1 1 [ 117.190091][ T6616] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 117.222855][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 117.223360][ T6616] lowmem_reserve[]: 0 0 0 0 0 [ 117.241067][ T6616] Node 1 Normal free:3895092kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23360kB local_pcp:8480kB free_cma:0kB [ 117.285081][ T6616] lowmem_reserve[]: 0 0 0 0 0 [ 117.294961][ T6616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.308711][ T6616] Node 0 DMA32: 660*4kB (UME) 237*8kB (UME) 189*16kB (UME) 151*32kB (UME) 88*64kB (UME) 49*128kB (UM) 24*256kB (UME) 17*512kB (UM) 8*1024kB (UM) 3*2048kB (UM) 329*4096kB (M) = 1401064kB [ 117.372213][ T6616] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 117.477523][ T6616] Node 1 Normal: 225*4kB (UME) 48*8kB (UME) 39*16kB (UME) 68*32kB (UME) 21*64kB (UME) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 948*4096kB (ME) = 3895092kB [ 117.534829][ T6616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.581682][ T6659] netlink: 304 bytes leftover after parsing attributes in process `syz.3.152'. [ 117.609743][ T6616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.653815][ T6616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.680268][ T6616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.692211][ T6616] 42602 total pagecache pages [ 117.701833][ T6616] 0 pages in swap cache [ 117.746692][ T6616] Free swap = 124996kB [ 117.751889][ T6616] Total swap = 124996kB [ 117.756087][ T6616] 2097051 pages RAM [ 117.770848][ T6616] 0 pages HighMem/MovableOnly [ 117.775620][ T6616] 425441 pages reserved [ 117.827182][ T6616] 0 pages cma reserved [ 117.940962][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 118.070408][ T6670] veth3: entered promiscuous mode [ 118.379223][ T6687] netlink: 'syz.3.160': attribute type 13 has an invalid length. [ 118.396513][ T6687] netlink: 'syz.3.160': attribute type 17 has an invalid length. [ 118.564843][ T6703] xt_hashlimit: size too large, truncated to 1048576 [ 118.577967][ T6700] xt_hashlimit: size too large, truncated to 1048576 [ 118.590791][ T6702] x_tables: ip_tables: udp match: only valid for protocol 17 [ 118.601554][ T6687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.889580][ T6712] netlink: 'syz.3.168': attribute type 282 has an invalid length. [ 119.096321][ T6719] __nla_validate_parse: 5 callbacks suppressed [ 119.096342][ T6719] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.171'. [ 119.129238][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'. [ 119.461491][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.527543][ T6741] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 119.599071][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.603544][ T6741] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 119.630569][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.687713][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.714527][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.757416][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.785937][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.821256][ T6739] netlink: 156 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.839998][ T6751] batadv_slave_0: entered promiscuous mode [ 119.849401][ T6751] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 119.860390][ T6751] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.879521][ T6751] hsr1: entered allmulticast mode [ 119.885864][ T6751] syz_tun: entered allmulticast mode [ 119.892112][ T6751] batadv_slave_0: entered allmulticast mode [ 119.957357][ T2977] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.071125][ T6759] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 120.100995][ T6759] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 120.440743][ T6772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.448257][ T6772] IPv6: NLM_F_CREATE should be set when creating new route [ 120.527791][ T6779] netlink: 'syz.3.186': attribute type 3 has an invalid length. [ 120.872611][ T6803] netlink: 'syz.2.187': attribute type 6 has an invalid length. [ 121.766022][ T6845] netlink: 'syz.2.199': attribute type 6 has an invalid length. [ 122.214840][ T6869] trusted_key: syz.4.206 sent an empty control message without MSG_MORE. [ 122.615741][ T6881] netdevsim0: renamed from erspan0 (while UP) [ 122.668032][ T6881] netdevsim0: entered promiscuous mode [ 122.679931][ T6881] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.770244][ T6881] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 122.806888][ T6881] netlink: 'syz.0.208': attribute type 2 has an invalid length. [ 122.927920][ T5968] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 123.264247][ T6902] fido_id[6902]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 123.695335][ T6938] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 123.742147][ T6941] Bluetooth: MGMT ver 1.23 [ 123.750113][ T6937] tipc: Started in network mode [ 123.755114][ T6937] tipc: Node identity 7, cluster identity 4711 [ 123.761973][ T6937] tipc: Node number set to 7 [ 124.704526][ T6983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 124.748230][ T6985] __nla_validate_parse: 101 callbacks suppressed [ 124.748249][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 124.956889][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.008100][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.076574][ T7009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.083874][ T7009] IPv6: NLM_F_CREATE should be set when creating new route [ 125.110372][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.125090][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.612334][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 125.860622][ T7027] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 125.959105][ T7027] netlink: 224 bytes leftover after parsing attributes in process `syz.2.236'. [ 126.050134][ T7036] netlink: 1300 bytes leftover after parsing attributes in process `syz.4.239'. [ 126.489615][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 126.523037][ T7067] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.529802][ T7067] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.053128][ T7083] netlink: 152 bytes leftover after parsing attributes in process `syz.2.247'. [ 127.276177][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.4.249'. [ 127.538199][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 127.930510][ T7121] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 127.952103][ T7123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.258'. [ 128.129467][ T7128] IPVS: Scheduler module ip_vs_sip not found [ 128.165653][ T7121] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.178618][ T7128] IPv6: NLM_F_REPLACE set, but no existing node found! [ 128.515670][ T7145] netlink: 14 bytes leftover after parsing attributes in process `syz.0.262'. [ 128.741828][ T7145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.767290][ T7145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.811999][ T7145] bond0 (unregistering): Released all slaves [ 129.113749][ T7159] pim6reg1: entered promiscuous mode [ 129.120972][ T7159] pim6reg1: entered allmulticast mode [ 129.455664][ T7180] netlink: 'syz.0.271': attribute type 3 has an invalid length. [ 129.470530][ T7180] netlink: 'syz.0.271': attribute type 3 has an invalid length. [ 129.880977][ T7212] tipc: Enabling of bearer rejected, failed to enable media [ 130.068349][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 130.102212][ T7220] netlink: 'syz.4.280': attribute type 1 has an invalid length. [ 130.235796][ T7226] netlink: 100 bytes leftover after parsing attributes in process `syz.2.282'. [ 130.250044][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.280'. [ 130.297135][ T7226] netlink: 100 bytes leftover after parsing attributes in process `syz.2.282'. [ 130.304681][ T7225] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 130.901218][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 131.420498][ T7266] netlink: 76 bytes leftover after parsing attributes in process `syz.1.292'. [ 131.733318][ T7274] netlink: 156 bytes leftover after parsing attributes in process `syz.4.295'. [ 131.760792][ T7276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.853615][ T7269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.050796][ T7256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.713886][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 132.826522][ T7315] sctp: [Deprecated]: syz.3.305 (pid 7315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.826522][ T7315] Use struct sctp_sack_info instead [ 132.887938][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.761293][ T7353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.768656][ T7353] IPv6: NLM_F_CREATE should be set when creating new route [ 134.526450][ T7380] delete_channel: no stack [ 134.538727][ T7383]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 134.793770][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 134.841915][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 134.893281][ T7400] Cannot find map_set index 0 as target [ 135.183465][ T24] IPVS: starting estimator thread 0... [ 135.287189][ T7412] IPVS: using max 29 ests per chain, 69600 per kthread [ 135.796020][ T7436] __nla_validate_parse: 1 callbacks suppressed [ 135.796039][ T7436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.341'. [ 135.943293][ T7445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.343'. [ 137.365478][ T7461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.024728][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 138.261411][ T7482] hsr_slave_1 (unregistering): left promiscuous mode [ 139.048396][ T7511] tipc: Enabling of bearer rejected, failed to enable media [ 139.268013][ T7515] netlink: 'syz.2.362': attribute type 9 has an invalid length. [ 139.290157][ T7515] netlink: 'syz.2.362': attribute type 7 has an invalid length. [ 139.345779][ T7515] netlink: 'syz.2.362': attribute type 8 has an invalid length. [ 139.361595][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 139.498106][ T7522] netlink: 112 bytes leftover after parsing attributes in process `syz.0.364'. [ 139.692001][ T7527] netlink: 'syz.2.366': attribute type 26 has an invalid length. [ 140.193844][ T7546] !: renamed from dummy0 (while UP) [ 140.331298][ T7553] netlink: 59 bytes leftover after parsing attributes in process `syz.0.373'. [ 140.616214][ T7533] Cannot find add_set index 2 as target [ 140.702014][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 141.220424][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 141.229751][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 141.241068][ T7577] sctp: [Deprecated]: syz.2.371 (pid 7577) Use of int in maxseg socket option. [ 141.241068][ T7577] Use struct sctp_assoc_value instead [ 141.281149][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 141.564496][ T7603] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 141.725835][ T7603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.934301][ T7607] bond1: (slave gretap1): making interface the new active one [ 141.954735][ T7607] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 141.978250][ T7607] syz.3.378 (7607) used greatest stack depth: 18296 bytes left [ 142.534329][ T7635] netlink: 'syz.3.380': attribute type 16 has an invalid length. [ 142.555530][ T7635] netlink: 'syz.3.380': attribute type 17 has an invalid length. [ 142.733075][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.741000][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.785906][ T7642] IPv6: NLM_F_REPLACE set, but no existing node found! [ 142.844760][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.862019][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.064238][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 143.092555][ T6448] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.101332][ T6448] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.111586][ T6448] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.125159][ T6448] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.519853][ T7658] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.383'. [ 143.700654][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.387'. [ 143.896654][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 143.954055][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 143.975118][ T6448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.018352][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.026373][ T6448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.119954][ T7686] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 144.164539][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 144.188806][ T7706] netlink: 'syz.3.394': attribute type 4 has an invalid length. [ 144.277356][ T7709] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 144.284947][ T7709] team0: Device ipvlan2 is already an upper device of the team interface [ 144.347325][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.399293][ T7718] x_tables: duplicate underflow at hook 2 [ 144.450281][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.400'. [ 144.629405][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.834818][ T7734] veth0: entered promiscuous mode [ 144.856455][ T7737] veth0: left promiscuous mode [ 145.125910][ T7744] xt_CT: No such helper "snmp" [ 146.116977][ T30] audit: type=1107 audit(1752345277.924:2): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 146.567290][ T7805] __nla_validate_parse: 6 callbacks suppressed [ 146.567311][ T7805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.419'. [ 146.696654][ T7802] ipvlan2: entered promiscuous mode [ 146.736669][ T7802] bridge0: port 3(ipvlan2) entered blocking state [ 146.776618][ T7802] bridge0: port 3(ipvlan2) entered disabled state [ 146.788629][ T7802] ipvlan2: entered allmulticast mode [ 146.793995][ T7802] bridge0: entered allmulticast mode [ 146.805938][ T7802] ipvlan2: left allmulticast mode [ 146.811569][ T7802] bridge0: left allmulticast mode [ 147.207444][ T7825] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 147.216739][ T7825] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 147.237319][ T7829] netlink: 44 bytes leftover after parsing attributes in process `syz.1.426'. [ 147.246232][ T7829] netlink: 43 bytes leftover after parsing attributes in process `syz.1.426'. [ 147.260753][ T7829] netlink: 'syz.1.426': attribute type 5 has an invalid length. [ 147.277420][ T7833] syz_tun: entered allmulticast mode [ 147.278019][ T7829] netlink: 43 bytes leftover after parsing attributes in process `syz.1.426'. [ 147.364379][ T7833] dvmrp8: entered allmulticast mode [ 147.460418][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.428'. [ 147.677153][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.828647][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 147.848315][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.435'. [ 147.882581][ T7866] netlink: 256 bytes leftover after parsing attributes in process `syz.0.436'. [ 147.894503][ T7866] netlink: 48 bytes leftover after parsing attributes in process `syz.0.436'. [ 147.928979][ T7866] syz_tun: left allmulticast mode [ 147.938722][ T7866] dvmrp8: left allmulticast mode [ 148.055292][ T7869] lo speed is unknown, defaulting to 1000 [ 148.076660][ T7877] sctp: [Deprecated]: syz.1.438 (pid 7877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.076660][ T7877] Use struct sctp_sack_info instead [ 148.097539][ T7875] netdevsim0: left promiscuous mode [ 148.143929][ T7875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.161601][ T7876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.439'. [ 148.211443][ T7869] lo speed is unknown, defaulting to 1000 [ 148.249079][ T7869] lo speed is unknown, defaulting to 1000 [ 148.582450][ T7890] netlink: 'syz.2.443': attribute type 18 has an invalid length. [ 149.029673][ T9] lo speed is unknown, defaulting to 1000 [ 149.044293][ T7869] infiniband syz1: set active [ 149.052815][ T7869] infiniband syz1: added lo [ 149.073029][ T7869] syz1: rxe_create_cq: returned err = -12 [ 149.099348][ T7911] vlan2: entered promiscuous mode [ 149.106041][ T7911] team0: entered promiscuous mode [ 149.112562][ T7911] team_slave_0: entered promiscuous mode [ 149.113641][ T7912] Cannot find map_set index 0 as target [ 149.126578][ T7911] team_slave_1: entered promiscuous mode [ 149.133211][ T7869] infiniband syz1: Couldn't create ib_mad CQ [ 149.142008][ T7869] infiniband syz1: Couldn't open port 1 [ 149.244882][ T7869] RDS/IB: syz1: added [ 149.255030][ T7912] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 149.260000][ T7869] smc: adding ib device syz1 with port count 1 [ 149.310380][ T7869] smc: ib device syz1 port 1 has pnetid [ 149.354907][ T5926] lo speed is unknown, defaulting to 1000 [ 149.388290][ T7869] lo speed is unknown, defaulting to 1000 [ 149.601399][ T7920] Cannot find add_set index 0 as target [ 150.061176][ T7951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.091153][ T7951] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 150.150479][ T7927] lo speed is unknown, defaulting to 1000 [ 150.242089][ T7953] IPVS: length: 163 != 8 [ 150.327393][ T7920] bridge0: entered allmulticast mode [ 150.332910][ T7956] netlink: 'syz.1.461': attribute type 30 has an invalid length. [ 150.354447][ T7920] bridge_slave_1: left allmulticast mode [ 150.368315][ T7920] bridge_slave_1: left promiscuous mode [ 150.383820][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.416820][ T7920] bridge_slave_0: left allmulticast mode [ 150.435767][ T7920] bridge_slave_0: left promiscuous mode [ 150.442281][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.487557][ T7920] bridge0 (unregistering): left allmulticast mode [ 150.564204][ T7956] netlink: 'syz.1.461': attribute type 30 has an invalid length. [ 150.593982][ T6441] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.615707][ T6441] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.634925][ T6441] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.839647][ T7869] lo speed is unknown, defaulting to 1000 [ 151.346191][ T7869] lo speed is unknown, defaulting to 1000 [ 151.645972][ T7981] __nla_validate_parse: 6 callbacks suppressed [ 151.645994][ T7981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.469'. [ 151.689357][ T7982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.469'. [ 151.775458][ T7928] lo speed is unknown, defaulting to 1000 [ 151.924714][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.471'. [ 152.023028][ T7999] netlink: 200 bytes leftover after parsing attributes in process `syz.4.473'. [ 152.034011][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 152.147009][ T7961] lo speed is unknown, defaulting to 1000 [ 152.450645][ T8010] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 152.620449][ T7869] lo speed is unknown, defaulting to 1000 [ 152.931851][ T8018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.477'. [ 153.039669][ T7869] lo speed is unknown, defaulting to 1000 [ 153.091166][ T8023] ..@ÿ: renamed from bond_slave_0 [ 153.405623][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 153.560729][ T8031] netlink: 6364 bytes leftover after parsing attributes in process `syz.1.484'. [ 153.586706][ T8033] netlink: 260 bytes leftover after parsing attributes in process `syz.0.483'. [ 153.617051][ T8033] netlink: 260 bytes leftover after parsing attributes in process `syz.0.483'. [ 154.024142][ T8047] vlan2: entered allmulticast mode [ 154.043803][ T8047] bridge_slave_0: entered allmulticast mode [ 154.721127][ T8080] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 155.240126][ T8106] netlink: 'syz.2.503': attribute type 39 has an invalid length. [ 155.287109][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.654731][ T8117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.667282][ T8117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.136111][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 156.145050][ T8133] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 156.156102][ T8133] team0: Failed to send options change via netlink (err -105) [ 156.164504][ T8133] team0: Port device batadv1 added [ 156.188332][ T3002] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.227936][ T8117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.242439][ T8117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.273118][ T8142] ip6erspan0: entered allmulticast mode [ 156.303615][ T8158] dvmrp0: entered allmulticast mode [ 156.311363][ T3002] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.373570][ T8117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.404689][ T8117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.453470][ T3002] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.474398][ T3002] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.821323][ T8174] __nla_validate_parse: 8 callbacks suppressed [ 156.821341][ T8174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.522'. [ 156.847287][ T8174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.522'. [ 156.921765][ T6441] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.947178][ T6441] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.984143][ T6441] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.000091][ T6441] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.041064][ T6441] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.059320][ T6441] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.087233][ T1157] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.099687][ T1157] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.140683][ T8181] netlink: 'syz.2.525': attribute type 2 has an invalid length. [ 157.167261][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'. [ 157.244229][ T8187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.526'. [ 157.369694][ T8190] sctp: [Deprecated]: syz.2.527 (pid 8190) Use of int in max_burst socket option deprecated. [ 157.369694][ T8190] Use struct sctp_assoc_value instead [ 157.390429][ T8191] netlink: 52 bytes leftover after parsing attributes in process `syz.1.526'. [ 157.594773][ T8203] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 157.603134][ T8203] netlink: 204 bytes leftover after parsing attributes in process `syz.3.532'. [ 157.639823][ T8204] netlink: 92 bytes leftover after parsing attributes in process `syz.0.531'. [ 157.785400][ T8210] dvmrp8: entered allmulticast mode [ 157.894905][ T8209] dvmrp8: left allmulticast mode [ 158.336241][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'. [ 158.373534][ T8239] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 158.438765][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 158.678324][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 158.753444][ T8254] bond0: entered promiscuous mode [ 158.772758][ T8254] bond_slave_0: entered promiscuous mode [ 158.791629][ T8254] bond_slave_1: entered promiscuous mode [ 158.823157][ T8254] macvlan1: entered promiscuous mode [ 158.878537][ T8254] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 158.898580][ T8254] Cannot create hsr debugfs directory [ 158.928437][ T8254] hsr1: entered promiscuous mode [ 159.125816][ T8265] netlink: 'syz.4.551': attribute type 13 has an invalid length. [ 159.151972][ T8265] netlink: 'syz.4.551': attribute type 17 has an invalid length. [ 159.338429][ T8282] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003 [ 159.346519][ T8282] Cannot find add_set index 3 as target [ 159.446854][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.462205][ T8291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.605790][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.701264][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.819607][ T8265] geneve2: left promiscuous mode [ 159.826285][ T8265] geneve2: left allmulticast mode [ 159.849129][ T8265] vlan2: left allmulticast mode [ 159.854637][ T8265] bridge_slave_0: left allmulticast mode [ 159.866057][ T8287] netlink: 'syz.3.557': attribute type 2 has an invalid length. [ 159.898932][ T8267] lo speed is unknown, defaulting to 1000 [ 160.591304][ T8316] bridge0: port 3(vlan2) entered blocking state [ 160.601984][ T8316] bridge0: port 3(vlan2) entered disabled state [ 160.614106][ T8316] vlan2: entered allmulticast mode [ 160.622327][ T8316] bridge0: entered allmulticast mode [ 160.654997][ T8316] vlan2: left allmulticast mode [ 160.664159][ T8316] bridge0: left allmulticast mode [ 160.740091][ T8317] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 160.905047][ T8332] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 160.950892][ T8332] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 161.012073][ T8313] lo speed is unknown, defaulting to 1000 [ 161.461911][ T8353] !: renamed from dummy0 (while UP) [ 162.290837][ T8358] lo speed is unknown, defaulting to 1000 [ 162.607140][ T8385] __nla_validate_parse: 10 callbacks suppressed [ 162.607161][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 162.619190][ T8386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.647553][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 162.864113][ T8397] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 163.021325][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 163.089033][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.116016][ T8410] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 163.152693][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.582'. [ 163.161944][ T8410] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 163.566718][ T8375] lo speed is unknown, defaulting to 1000 [ 163.575704][ T8406] lo speed is unknown, defaulting to 1000 [ 163.641291][ T8375] lo speed is unknown, defaulting to 1000 [ 163.712770][ T8375] lo speed is unknown, defaulting to 1000 [ 164.595879][ T8454] batadv_slave_0: entered promiscuous mode [ 164.638366][ T8429] lo speed is unknown, defaulting to 1000 [ 165.035455][ T8375] infiniband syz0: set down [ 165.040210][ T11] lo speed is unknown, defaulting to 1000 [ 165.046131][ T8375] infiniband syz0: added lo [ 165.056511][ T8375] syz0: rxe_create_cq: returned err = -12 [ 165.063270][ T8465] IPv6: Can't replace route, no match found [ 165.065913][ T8375] infiniband syz0: Couldn't create ib_mad CQ [ 165.081550][ T8375] infiniband syz0: Couldn't open port 1 [ 165.141499][ T8465] team0: Port device vxlan1 added [ 165.152355][ T8375] RDS/IB: syz0: added [ 165.187153][ T8375] smc: adding ib device syz0 with port count 1 [ 165.200049][ T8467] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 165.217005][ T8375] smc: ib device syz0 port 1 has pnetid [ 165.273654][ T8467] vlan2: entered allmulticast mode [ 165.279292][ T8467] ip6gretap0: entered allmulticast mode [ 165.394002][ T9] lo speed is unknown, defaulting to 1000 [ 165.440779][ T8375] lo speed is unknown, defaulting to 1000 [ 165.441596][ T8453] batadv_slave_0: left promiscuous mode [ 165.551503][ T8476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.597'. [ 165.565908][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.597'. [ 165.596880][ T8476] netlink: 'syz.4.597': attribute type 2 has an invalid length. [ 165.729006][ T8480] batadv_slave_0: entered promiscuous mode [ 165.746766][ T8483] netlink: 'syz.1.598': attribute type 25 has an invalid length. [ 165.757144][ T8482] netlink: 'syz.1.598': attribute type 25 has an invalid length. [ 165.801670][ T8482] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.598'. [ 165.862836][ T8479] batadv_slave_0: left promiscuous mode [ 166.045096][ T8375] lo speed is unknown, defaulting to 1000 [ 166.603962][ T8375] lo speed is unknown, defaulting to 1000 [ 166.932428][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 167.033676][ T8517] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 167.087924][ T8517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.131411][ T8519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.140892][ T8519] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.158725][ T8519] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 167.187244][ T8375] lo speed is unknown, defaulting to 1000 [ 167.209790][ T8517] veth3: entered promiscuous mode [ 167.228409][ T8517] bond3: (slave veth3): Enslaving as an active interface with a down link [ 167.244736][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.609'. [ 167.255457][ T8517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.457335][ T8523] netlink: 'syz.4.610': attribute type 13 has an invalid length. [ 167.472477][ T8523] netlink: 'syz.4.610': attribute type 17 has an invalid length. [ 167.535231][ T8523] veth3: left promiscuous mode [ 167.552728][ T8526] syzkaller0: entered allmulticast mode [ 167.580081][ T6448] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 167.589169][ T6448] bond3: (slave veth3): making interface the new active one [ 167.604704][ T6448] bond3: active interface up! [ 167.623615][ T8375] lo speed is unknown, defaulting to 1000 [ 167.812831][ T8375] lo speed is unknown, defaulting to 1000 [ 167.995421][ T8375] lo speed is unknown, defaulting to 1000 [ 168.179980][ T8375] lo speed is unknown, defaulting to 1000 [ 168.381953][ T8375] lo speed is unknown, defaulting to 1000 [ 168.396622][ T8529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.612'. [ 168.670678][ T8489] lo speed is unknown, defaulting to 1000 [ 168.950348][ T8521] lo speed is unknown, defaulting to 1000 [ 169.242342][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.618'. [ 169.345832][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 169.574629][ T8553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 169.821576][ T8557] netlink: 128 bytes leftover after parsing attributes in process `syz.1.620'. [ 169.947044][ T8557] netlink: 72 bytes leftover after parsing attributes in process `syz.1.620'. [ 170.288600][ T8569] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 170.331716][ T8569] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 170.637219][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.705944][ T8583] tipc: Started in network mode [ 170.722722][ T8583] tipc: Node identity 82c8a83d0ee4, cluster identity 4711 [ 170.744519][ T8583] tipc: Enabled bearer , priority 0 [ 170.864065][ T8583] tipc: Resetting bearer [ 171.075289][ T8577] tipc: Disabling bearer [ 171.402906][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 171.492622][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.636'. [ 171.658918][ T8609] lo speed is unknown, defaulting to 1000 [ 171.859879][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.637'. [ 172.338101][ T8621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.571468][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 172.592448][ T8626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.601514][ T8626] team0: Port device bond1 added [ 172.609807][ T8609] lo speed is unknown, defaulting to 1000 [ 173.012172][ T8649] lo speed is unknown, defaulting to 1000 [ 173.070229][ T8655] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 173.719208][ T8678] netlink: 'syz.0.652': attribute type 23 has an invalid length. [ 174.005176][ T8685] ªªªªª»: renamed from dummy0 (while UP) [ 174.164558][ T8649] lo speed is unknown, defaulting to 1000 [ 174.518386][ T8709] netlink: 'syz.2.657': attribute type 21 has an invalid length. [ 174.570051][ T8699] lo speed is unknown, defaulting to 1000 [ 175.514695][ T8739] __nla_validate_parse: 4 callbacks suppressed [ 175.514716][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.662'. [ 175.639458][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 175.887081][ T8699] lo speed is unknown, defaulting to 1000 [ 175.916144][ T8743] lo speed is unknown, defaulting to 1000 [ 176.477168][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 176.651007][ T8742] lo speed is unknown, defaulting to 1000 [ 176.962045][ T8742] lo speed is unknown, defaulting to 1000 [ 177.247199][ T8766] netlink: 'syz.0.669': attribute type 21 has an invalid length. [ 177.256701][ T8743] lo speed is unknown, defaulting to 1000 [ 177.257461][ T8749] lo speed is unknown, defaulting to 1000 [ 177.304185][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 177.315581][ T8766] netlink: 'syz.0.669': attribute type 6 has an invalid length. [ 177.387497][ T8766] netlink: 64 bytes leftover after parsing attributes in process `syz.0.669'. [ 177.585335][ T5852] Bluetooth: hci4: link tx timeout [ 177.591029][ T5852] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 177.608313][ T5852] Bluetooth: hci4: link tx timeout [ 177.613564][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.060375][ T8749] lo speed is unknown, defaulting to 1000 [ 179.685641][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 179.830773][ T8801] netlink: 'syz.1.675': attribute type 10 has an invalid length. [ 179.944270][ T8801] veth0_vlan: left promiscuous mode [ 179.999422][ T8801] veth0_vlan: entered promiscuous mode [ 180.020859][ T8801] team0: Device veth0_vlan failed to register rx_handler [ 180.073381][ T6441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.097486][ T6441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.232954][ T8806] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 180.247710][ T8806] netlink: 236 bytes leftover after parsing attributes in process `syz.0.676'. [ 180.257269][ T8806] NCSI netlink: No device for ifindex 813332851 [ 180.545510][ T8811] bridge_slave_0: left allmulticast mode [ 180.551429][ T8811] bridge_slave_0: left promiscuous mode [ 180.564418][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.582773][ T8811] bridge_slave_1: left allmulticast mode [ 180.588823][ T8811] bridge_slave_1: left promiscuous mode [ 180.594616][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.615803][ T8811] team0: Port device team_slave_0 removed [ 180.625936][ T8811] team0: Port device team_slave_1 removed [ 180.647785][ T8811] team0: Port device bond1 removed [ 180.681853][ T11] lo speed is unknown, defaulting to 1000 [ 180.992622][ T8818] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 181.376323][ T8821] lo speed is unknown, defaulting to 1000 [ 181.518424][ T8837] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.576045][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 181.753292][ T8843] sctp: [Deprecated]: syz.0.687 (pid 8843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.753292][ T8843] Use struct sctp_sack_info instead [ 181.770393][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 181.779450][ T8821] lo speed is unknown, defaulting to 1000 [ 181.786378][ T8843] IPVS: Unknown mcast interface: batadv0 [ 181.820328][ T8847] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 181.828439][ T8847] netlink: 172 bytes leftover after parsing attributes in process `syz.3.689'. [ 181.838260][ T8847] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 181.919038][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.690'. [ 182.100783][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.692'. [ 182.272529][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.281359][ T8861] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.312744][ T8861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.329823][ T5951] lo speed is unknown, defaulting to 1000 [ 182.335594][ T5951] syz0: Port: 1 Link ACTIVE [ 182.359430][ T5903] lo speed is unknown, defaulting to 1000 [ 182.451712][ T8864] lo speed is unknown, defaulting to 1000 [ 182.458333][ T8864] lo speed is unknown, defaulting to 1000 [ 182.480664][ T8864] lo speed is unknown, defaulting to 1000 [ 182.504256][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 182.535868][ T8864] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.574896][ T8864] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 182.655920][ T8864] lo speed is unknown, defaulting to 1000 [ 182.696205][ T8864] lo speed is unknown, defaulting to 1000 [ 182.745497][ T8864] lo speed is unknown, defaulting to 1000 [ 182.786539][ T8864] lo speed is unknown, defaulting to 1000 [ 182.808710][ T8864] lo speed is unknown, defaulting to 1000 [ 183.072443][ T5926] IPVS: starting estimator thread 0... [ 183.080171][ T8878] netlink: 48 bytes leftover after parsing attributes in process `syz.2.697'. [ 183.187299][ T8879] IPVS: using max 24 ests per chain, 57600 per kthread [ 183.634204][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.703'. [ 183.644094][ T8902] tipc: Enabling of bearer rejected, failed to enable media [ 183.895969][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 183.919290][ T8917] batadv_slave_1: entered promiscuous mode [ 184.055031][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 184.091900][ T8927] netlink: 64 bytes leftover after parsing attributes in process `syz.4.709'. [ 184.212934][ T8931] sctp: [Deprecated]: syz.1.712 (pid 8931) Use of int in max_burst socket option. [ 184.212934][ T8931] Use struct sctp_assoc_value instead [ 184.244983][ T8933] IPv6: NLM_F_REPLACE set, but no existing node found! [ 184.706643][ T8949] lo speed is unknown, defaulting to 1000 [ 184.972317][ T8962] netlink: 'syz.2.723': attribute type 1 has an invalid length. [ 185.195453][ T8973] batadv0: left allmulticast mode [ 185.200950][ T8973] batadv0: left promiscuous mode [ 185.206376][ T8973] bridge0: port 3(batadv0) entered disabled state [ 185.269225][ T8978] netlink: 'syz.2.726': attribute type 10 has an invalid length. [ 185.310077][ T8973] bridge_slave_0: left allmulticast mode [ 185.330788][ T8973] bridge_slave_0: left promiscuous mode [ 185.347392][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.397137][ T8973] bridge_slave_1: left allmulticast mode [ 185.437440][ T8973] bridge_slave_1: left promiscuous mode [ 185.443502][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.535155][ T8984] block nbd4: not configured, cannot reconfigure [ 185.616238][ T8973] bond0: (slave ..@ÿ): Releasing backup interface [ 185.635622][ T8973] bond0: (slave bond_slave_1): Releasing backup interface [ 185.656143][ T8973] team0: Port device team_slave_0 removed [ 185.667857][ T8973] team0: Port device team_slave_1 removed [ 185.682072][ T8973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.693808][ T8973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.712719][ T8978] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.723447][ T8949] lo speed is unknown, defaulting to 1000 [ 185.727663][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.729475][ T8959] lo speed is unknown, defaulting to 1000 [ 185.754170][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.810078][ T8986] team0: Failed to send options change via netlink (err -105) [ 185.856947][ T8986] team0: Port device batadv0 added [ 186.413457][ T8949] lo speed is unknown, defaulting to 1000 [ 186.478222][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.533557][ T8959] lo speed is unknown, defaulting to 1000 [ 187.098539][ T8959] lo speed is unknown, defaulting to 1000 [ 187.109786][ T9048] __nla_validate_parse: 7 callbacks suppressed [ 187.109803][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'. [ 188.107170][ T9091] netlink: 48 bytes leftover after parsing attributes in process `syz.0.759'. [ 189.048439][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 189.143462][ T9127] tipc: Enabling of bearer rejected, failed to enable media [ 189.167165][ T9126] netlink: 'syz.0.768': attribute type 21 has an invalid length. [ 189.237010][ T9126] netlink: 156 bytes leftover after parsing attributes in process `syz.0.768'. [ 189.316687][ T9139] netlink: 372 bytes leftover after parsing attributes in process `syz.2.773'. [ 189.452815][ T9143] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 189.561150][ T9143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.614841][ T9157] netlink: 'syz.1.778': attribute type 15 has an invalid length. [ 189.616542][ T9144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.630170][ T9144] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 189.647872][ T9144] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 189.762082][ T9145] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 189.944407][ T9160] delete_channel: no stack [ 189.985947][ T9172] lo speed is unknown, defaulting to 1000 [ 190.269502][ T11] IPVS: starting estimator thread 0... [ 190.367118][ T9184] IPVS: using max 26 ests per chain, 62400 per kthread [ 190.413406][ T9190] netlink: 'syz.3.786': attribute type 49 has an invalid length. [ 190.850576][ T9169] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 190.866859][ T9165] lo speed is unknown, defaulting to 1000 [ 190.909861][ T9187] tipc: Enabled bearer , priority 0 [ 190.941739][ T9190] ip6gretap1: entered promiscuous mode [ 190.951126][ T9191] syzkaller0: entered promiscuous mode [ 190.967192][ T9191] syzkaller0: entered allmulticast mode [ 191.004629][ T6443] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.031099][ T6443] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.057672][ T5968] lo speed is unknown, defaulting to 1000 [ 191.057694][ T6443] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.063935][ T5968] syz1: Port: 1 Link DOWN [ 191.083749][ T6443] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.107233][ T9182] tipc: Resetting bearer [ 191.153428][ T9182] tipc: Disabling bearer [ 191.207226][ T6443] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.239459][ T6443] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.253161][ T6443] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.273575][ T6443] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.293895][ T5968] lo speed is unknown, defaulting to 1000 [ 191.441491][ T9165] lo speed is unknown, defaulting to 1000 [ 191.442609][ T9215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.791'. [ 191.730825][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 191.740625][ T9220] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 191.753176][ T9222] netlink: 'syz.0.795': attribute type 6 has an invalid length. [ 191.758365][ T9220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.792239][ T9222] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.795'. [ 191.958793][ T9230] netlink: 248 bytes leftover after parsing attributes in process `syz.4.798'. [ 192.007141][ T9228] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 192.171409][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 192.182439][ T9228] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 192.182853][ T9165] lo speed is unknown, defaulting to 1000 [ 192.192834][ T9238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.801'. [ 192.606345][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 192.721160][ T9265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 193.260123][ T9274] lo speed is unknown, defaulting to 1000 [ 193.602969][ T9287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.810'. [ 193.646793][ T9287] netlink: 52 bytes leftover after parsing attributes in process `syz.0.810'. [ 194.032754][ T9271] lo speed is unknown, defaulting to 1000 [ 194.051821][ T9302] netlink: 'syz.1.814': attribute type 12 has an invalid length. [ 194.069706][ T9274] lo speed is unknown, defaulting to 1000 [ 194.098730][ T9302] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.814'. [ 194.295034][ T9309] netlink: 68 bytes leftover after parsing attributes in process `syz.1.817'. [ 194.321788][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.633130][ T9318] netlink: 156 bytes leftover after parsing attributes in process `syz.1.819'. [ 194.850833][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 194.965472][ T9324] veth0: entered promiscuous mode [ 195.230425][ T9271] lo speed is unknown, defaulting to 1000 [ 195.248873][ T9274] lo speed is unknown, defaulting to 1000 [ 195.394201][ T9323] veth0: left promiscuous mode [ 195.893660][ T9360] x_tables: duplicate underflow at hook 1 [ 195.915647][ T9355] lo speed is unknown, defaulting to 1000 [ 196.570752][ T9387] ip6gre1: entered allmulticast mode [ 196.611877][ T9387] netlink: 'syz.3.839': attribute type 8 has an invalid length. [ 196.656086][ T9355] lo speed is unknown, defaulting to 1000 [ 197.170709][ T9385] lo speed is unknown, defaulting to 1000 [ 197.177864][ T9271] lo speed is unknown, defaulting to 1000 [ 197.196315][ T9355] lo speed is unknown, defaulting to 1000 [ 197.257843][ T9404] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 197.282167][ T9403] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 197.318914][ T9404] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 197.347843][ T9403] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 197.503081][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'. [ 198.038149][ T9385] lo speed is unknown, defaulting to 1000 [ 198.544184][ T9428] netlink: 1 bytes leftover after parsing attributes in process `syz.1.847'. [ 198.853500][ T9385] lo speed is unknown, defaulting to 1000 [ 198.969368][ T9425] lo speed is unknown, defaulting to 1000 [ 200.544985][ T9460] team0 (unregistering): Port device team_slave_0 removed [ 200.575794][ T9460] team0 (unregistering): Port device team_slave_1 removed [ 200.644222][ T9460] team0 (unregistering): Port device batadv1 removed [ 200.717361][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.734516][ T9425] lo speed is unknown, defaulting to 1000 [ 200.887414][ T1104] wlan0: Trigger new scan to find an IBSS to join [ 201.162477][ T9475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 201.182251][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.858'. [ 201.253676][ T9425] lo speed is unknown, defaulting to 1000 [ 201.502504][ T9484] x_tables: duplicate underflow at hook 3 [ 201.535513][ T9487] netlink: 156 bytes leftover after parsing attributes in process `syz.4.863'. [ 201.690516][ T9492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.865'. [ 201.753757][ T9481] tipc: Started in network mode [ 201.759122][ T9481] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 201.785523][ T9481] tipc: Enabling of bearer rejected, failed to enable media [ 202.183277][ T9516] netlink: 'syz.1.869': attribute type 11 has an invalid length. [ 202.206303][ T9517] netlink: 76 bytes leftover after parsing attributes in process `syz.3.871'. [ 202.241126][ T9519] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 202.300744][ T9511] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 202.528616][ T9524] netlink: 104 bytes leftover after parsing attributes in process `syz.4.872'. [ 202.606066][ T9511] gretap1: entered promiscuous mode [ 203.035397][ T9530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.067274][ T9530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.098177][ T9530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.105607][ T9530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.123713][ T9537] netlink: 156 bytes leftover after parsing attributes in process `syz.2.875'. [ 203.448697][ T9552] tap0: tun_chr_ioctl cmd 1074025680 [ 203.583733][ T9560] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20001 [ 203.922007][ T59] wlan0: Trigger new scan to find an IBSS to join [ 204.065196][ T9574] xt_CT: No such helper "syz0" [ 204.065618][ T9573] xt_CT: No such helper "syz0" [ 204.219749][ T9584] syzkaller1: entered promiscuous mode [ 204.250759][ T9584] syzkaller1: entered allmulticast mode [ 204.284304][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 204.310840][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 204.351737][ T9588] lo speed is unknown, defaulting to 1000 [ 204.540439][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 204.983751][ T9612] xt_bpf: check failed: parse error [ 205.114821][ T9616] ip6gre2: entered allmulticast mode [ 205.147306][ T9588] lo speed is unknown, defaulting to 1000 [ 205.161124][ T9603] lo speed is unknown, defaulting to 1000 [ 205.355242][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 205.486784][ T9637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.045222][ T9588] lo speed is unknown, defaulting to 1000 [ 206.187674][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.337957][ T9631] lo speed is unknown, defaulting to 1000 [ 206.346962][ T9603] lo speed is unknown, defaulting to 1000 [ 206.769825][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 206.869971][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 206.888354][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.900285][ T9677] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 206.921567][ T6443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.987000][ T6443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.067138][ T9603] lo speed is unknown, defaulting to 1000 [ 207.181157][ T9631] lo speed is unknown, defaulting to 1000 [ 207.617318][ T9700] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 207.841500][ T9705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.921'. [ 207.845699][ T9631] lo speed is unknown, defaulting to 1000 [ 207.876152][ T9705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.921'. [ 208.026738][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'. [ 208.067078][ T9711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.922'. [ 208.292461][ T9723] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 208.307143][ T9724] netlink: 'syz.1.924': attribute type 10 has an invalid length. [ 208.319818][ T9723] netlink: 'syz.3.923': attribute type 2 has an invalid length. [ 208.344749][ T9725] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 208.360472][ T9725] netlink: 'syz.3.923': attribute type 2 has an invalid length. [ 209.243068][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 209.292198][ T9746] wg0: Master is either lo or non-ether device [ 209.631838][ T9750] lo speed is unknown, defaulting to 1000 [ 209.808185][ T9757] ip6t_rpfilter: unknown options [ 209.845470][ T9756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.935'. [ 209.948131][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 211.026828][ T9750] lo speed is unknown, defaulting to 1000 [ 211.070747][ T9809] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.950'. [ 211.685984][ T9750] lo speed is unknown, defaulting to 1000 [ 211.821308][ T9842] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 212.315337][ T9848] netlink: 'syz.3.958': attribute type 13 has an invalid length. [ 212.323640][ T9848] netlink: 'syz.3.958': attribute type 17 has an invalid length. [ 212.355904][ T9855] netlink: 'syz.4.957': attribute type 2 has an invalid length. [ 212.390530][ T9848] eql: refused to change device tx_queue_len [ 212.414853][ T9848] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 212.436049][ T9861] netlink: 240 bytes leftover after parsing attributes in process `syz.4.957'. [ 212.519632][ T9853] lo speed is unknown, defaulting to 1000 [ 212.804715][ T9853] lo speed is unknown, defaulting to 1000 [ 213.139427][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.963'. [ 213.171652][ T9853] lo speed is unknown, defaulting to 1000 [ 213.392976][ T9889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 213.593768][ T9903] sctp: [Deprecated]: syz.0.971 (pid 9903) Use of int in max_burst socket option. [ 213.593768][ T9903] Use struct sctp_assoc_value instead [ 213.773980][ T9906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.973'. [ 213.832071][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 214.364247][ T9928] lo speed is unknown, defaulting to 1000 [ 214.790137][ T9943] team0: Port device veth3 added [ 214.879342][ T9928] lo speed is unknown, defaulting to 1000 [ 214.984731][ T9954] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 215.079329][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 215.605928][ T9928] lo speed is unknown, defaulting to 1000 [ 215.854029][ T9987] netlink: 68 bytes leftover after parsing attributes in process `syz.4.993'. [ 215.872871][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 215.884807][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 215.884858][ T9987] netlink: 68 bytes leftover after parsing attributes in process `syz.4.993'. [ 215.907579][ T9984] netlink: 124 bytes leftover after parsing attributes in process `syz.0.994'. [ 215.947744][ T9989] bridge0: entered allmulticast mode [ 216.023926][ T9989] bridge0 (unregistering): left allmulticast mode [ 216.292541][T10008] tipc: Enabling of bearer rejected, failed to enable media [ 216.540314][T10022] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 216.803206][T10019] lo speed is unknown, defaulting to 1000 [ 216.874729][T10035] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 216.885428][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 216.885531][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 216.890079][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 217.363084][T10051] syz.3.1009: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.397866][T10051] CPU: 1 UID: 0 PID: 10051 Comm: syz.3.1009 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 217.397899][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.397912][T10051] Call Trace: [ 217.397922][T10051] [ 217.397931][T10051] dump_stack_lvl+0x189/0x250 [ 217.397975][T10051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.397998][T10051] ? __pfx__printk+0x10/0x10 [ 217.398022][T10051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.398046][T10051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.398070][T10051] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 217.398094][T10051] warn_alloc+0x214/0x310 [ 217.398116][T10051] ? stack_depot_save_flags+0x40/0x900 [ 217.398144][T10051] ? __pfx_warn_alloc+0x10/0x10 [ 217.398168][T10051] ? kasan_save_track+0x4f/0x80 [ 217.398197][T10051] ? xskq_create+0x56/0x170 [ 217.398216][T10051] ? xsk_init_queue+0xb0/0x110 [ 217.398233][T10051] ? xsk_setsockopt+0x4dc/0x8d0 [ 217.398249][T10051] ? do_sock_setsockopt+0x257/0x3e0 [ 217.398271][T10051] ? __x64_sys_setsockopt+0x18b/0x220 [ 217.398306][T10051] ? do_syscall_64+0xfa/0x3b0 [ 217.398327][T10051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.398350][T10051] __vmalloc_node_range_noprof+0x125/0x12f0 [ 217.398397][T10051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.398424][T10051] ? __kasan_kmalloc+0x93/0xb0 [ 217.398445][T10051] vmalloc_user_noprof+0xad/0xf0 [ 217.398466][T10051] ? xskq_create+0xbf/0x170 [ 217.398486][T10051] xskq_create+0xbf/0x170 [ 217.398508][T10051] xsk_init_queue+0xb0/0x110 [ 217.398530][T10051] xsk_setsockopt+0x4dc/0x8d0 [ 217.398551][T10051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.398569][T10051] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.398589][T10051] ? __lock_acquire+0xab9/0xd20 [ 217.398610][T10051] ? aa_sock_opt_perm+0x74/0x110 [ 217.398634][T10051] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 217.398657][T10051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.398677][T10051] do_sock_setsockopt+0x257/0x3e0 [ 217.398703][T10051] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 217.398731][T10051] ? __fget_files+0x2a/0x420 [ 217.398759][T10051] __x64_sys_setsockopt+0x18b/0x220 [ 217.398788][T10051] do_syscall_64+0xfa/0x3b0 [ 217.398809][T10051] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.398835][T10051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.398851][T10051] ? clear_bhb_loop+0x60/0xb0 [ 217.398870][T10051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.398887][T10051] RIP: 0033:0x7fd68058e929 [ 217.398907][T10051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.398921][T10051] RSP: 002b:00007fd6814b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.398938][T10051] RAX: ffffffffffffffda RBX: 00007fd6807b6080 RCX: 00007fd68058e929 [ 217.398950][T10051] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 217.398960][T10051] RBP: 00007fd680610b39 R08: 0000000000000004 R09: 0000000000000000 [ 217.398970][T10051] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.398981][T10051] R13: 0000000000000000 R14: 00007fd6807b6080 R15: 00007ffd1c133618 [ 217.399005][T10051] [ 217.401408][T10051] Mem-Info: [ 217.683582][T10019] lo speed is unknown, defaulting to 1000 [ 217.700546][T10051] active_anon:3801 inactive_anon:0 isolated_anon:0 [ 217.700546][T10051] active_file:1541 inactive_file:39904 isolated_file:0 [ 217.700546][T10051] unevictable:768 dirty:77 writeback:0 [ 217.700546][T10051] slab_reclaimable:11972 slab_unreclaimable:139873 [ 217.700546][T10051] mapped:30107 shmem:1497 pagetables:945 [ 217.700546][T10051] sec_pagetables:0 bounce:0 [ 217.700546][T10051] kernel_misc_reclaimable:0 [ 217.700546][T10051] free:1287419 free_pcp:15493 free_cma:0 [ 217.797182][T10061] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 217.963417][T10058] tipc: Enabling of bearer rejected, failed to enable media [ 217.974630][T10051] Node 0 active_anon:17052kB inactive_anon:0kB active_file:6164kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126352kB dirty:312kB writeback:0kB shmem:6304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12500kB pagetables:3644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 218.048992][T10051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 218.082648][T10062] xt_NFQUEUE: number of total queues is 0 [ 218.089782][T10062] ip6tnl0: entered promiscuous mode [ 218.099483][T10069] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 218.146929][T10051] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.217811][T10071] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 218.264116][T10051] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 218.272349][ T5951] lo speed is unknown, defaulting to 1000 [ 218.278748][ T5951] syz0: Port: 1 Link DOWN [ 218.307579][T10051] Node 0 DMA32 free:1229848kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22604kB inactive_anon:0kB active_file:6164kB inactive_file:157844kB unevictable:1536kB writepending:312kB present:3129332kB managed:2558272kB mlocked:0kB bounce:0kB free_pcp:38996kB local_pcp:21928kB free_cma:0kB [ 218.324576][ T9] lo speed is unknown, defaulting to 1000 [ 218.375715][ T9] syz0: Port: 1 Link ACTIVE [ 218.375781][ T5951] lo speed is unknown, defaulting to 1000 [ 218.408453][T10051] lowmem_reserve[]: 0 0 1 1 1 [ 218.413348][T10051] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 218.491665][T10051] lowmem_reserve[]: 0 0 0 0 0 [ 218.496468][T10051] Node 1 Normal free:3896884kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22144kB local_pcp:7232kB free_cma:0kB [ 218.527829][T10074] __nla_validate_parse: 12 callbacks suppressed [ 218.527852][T10074] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1015'. [ 218.580330][T10019] lo speed is unknown, defaulting to 1000 [ 218.594033][T10051] lowmem_reserve[]: 0 0 0 0 0 [ 218.604330][T10051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.628989][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 218.638667][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 218.650132][T10056] lo speed is unknown, defaulting to 1000 [ 218.667445][T10051] Node 0 DMA32: 3*4kB (E) 3*8kB (ME) 1*16kB (M) 802*32kB (UM) 251*64kB (UME) 87*128kB (UME) 47*256kB (UME) 30*512kB (UM) 17*1024kB (UME) 11*2048kB (UME) 270*4096kB (UM) = 1226164kB [ 218.698400][T10076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 218.740094][T10051] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 218.761370][T10051] Node 1 Normal: 225*4kB (UME) 48*8kB (UME) 39*16kB (UME) 110*32kB (UME) 28*64kB (UME) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 948*4096kB (ME) = 3896884kB [ 218.799551][T10061] netlink: 'syz.1.1013': attribute type 12 has an invalid length. [ 218.814788][T10051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.836369][T10051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.876610][T10051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.903624][T10051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.915898][T10051] 45793 total pagecache pages [ 218.922428][T10051] 0 pages in swap cache [ 218.926755][T10051] Free swap = 124996kB [ 218.932126][T10051] Total swap = 124996kB [ 218.936397][T10051] 2097051 pages RAM [ 218.940876][T10051] 0 pages HighMem/MovableOnly [ 218.945671][T10051] 425441 pages reserved [ 218.950826][T10051] 0 pages cma reserved [ 219.102974][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 219.131996][T10091] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1020'. [ 219.279364][T10056] lo speed is unknown, defaulting to 1000 [ 219.336401][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1021'. [ 219.620364][T10056] lo speed is unknown, defaulting to 1000 [ 219.627990][T10057] rdma_rxe: rxe_newlink: failed to add lo [ 219.661520][T10113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1025'. [ 219.673754][T10059] lo speed is unknown, defaulting to 1000 [ 219.939271][T10125] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1028'. [ 220.133716][T10059] lo speed is unknown, defaulting to 1000 [ 220.239297][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1031'. [ 220.531620][T10149] netlink: 'syz.3.1034': attribute type 12 has an invalid length. [ 220.661163][T10149] xt_CT: No such helper "snmp" [ 220.762108][T10059] lo speed is unknown, defaulting to 1000 [ 220.813671][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 221.294552][T10183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.005312][T10205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.553698][T10231] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.811336][T10239] tipc: Trying to set illegal importance in message [ 223.117062][T10249] tipc: Enabling of bearer rejected, failed to enable media [ 223.338524][T10263] netlink: 'syz.4.1059': attribute type 2 has an invalid length. [ 223.589496][T10274] netlink: 'syz.1.1064': attribute type 1 has an invalid length. [ 223.602904][T10272] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 223.652641][T10269] __nla_validate_parse: 4 callbacks suppressed [ 223.652655][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1061'. [ 223.698871][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1061'. [ 223.715092][T10272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.764152][T10279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.775254][T10279] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 223.788021][T10279] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 223.821942][T10278] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 223.835402][T10278] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 223.900779][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 223.910961][T10274] gretap1: entered promiscuous mode [ 223.917837][T10296] netlink: 'syz.2.1066': attribute type 6 has an invalid length. [ 223.925608][T10296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1066'. [ 223.956791][T10288] macvlan2: entered promiscuous mode [ 223.974197][T10288] macvlan2: entered allmulticast mode [ 223.981506][T10288] bond2: entered promiscuous mode [ 223.990150][T10288] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.001422][T10288] bond2: left promiscuous mode [ 224.627282][T10306] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1069'. [ 224.770818][T10321] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1074'. [ 224.780205][T10321] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1074'. [ 224.797421][T10321] netlink: 508 bytes leftover after parsing attributes in process `syz.4.1074'. [ 224.898803][T10323] lo speed is unknown, defaulting to 1000 [ 224.916372][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1076'. [ 225.193703][T10341] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1082'. [ 225.207025][T10341] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 225.544580][T10349] sctp: [Deprecated]: syz.3.1084 (pid 10349) Use of int in maxseg socket option. [ 225.544580][T10349] Use struct sctp_assoc_value instead [ 225.634245][T10323] lo speed is unknown, defaulting to 1000 [ 225.634245][T10334] lo speed is unknown, defaulting to 1000 [ 226.380019][T10334] lo speed is unknown, defaulting to 1000 [ 226.424067][T10323] lo speed is unknown, defaulting to 1000 [ 226.635052][T10382] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 226.841592][T10334] lo speed is unknown, defaulting to 1000 [ 227.256561][T10400] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 227.292884][T10400] macvtap1: entered allmulticast mode [ 227.309959][T10400] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 227.338233][T10400] batman_adv: batadv0: Adding interface: macvtap1 [ 227.344906][T10400] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.381461][T10400] batman_adv: batadv0: Interface activated: macvtap1 [ 227.563946][T10407] lo speed is unknown, defaulting to 1000 [ 227.639667][T10415] erspan0: entered promiscuous mode [ 227.654042][T10415] macvtap2: entered promiscuous mode [ 227.664570][T10415] macvtap2: entered allmulticast mode [ 227.672443][T10415] erspan0: entered allmulticast mode [ 228.292441][T10407] lo speed is unknown, defaulting to 1000 [ 228.292714][T10430] lo speed is unknown, defaulting to 1000 [ 228.770195][T10407] lo speed is unknown, defaulting to 1000 [ 228.770298][T10430] lo speed is unknown, defaulting to 1000 [ 229.440929][T10462] __nla_validate_parse: 15 callbacks suppressed [ 229.440948][T10462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1113'. [ 229.448120][T10430] lo speed is unknown, defaulting to 1000 [ 229.464659][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1113'. [ 230.150587][T10475] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 230.293880][T10475] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.313265][T10475] bond0: (slave team0): Enslaving as an active interface with an up link [ 230.577933][T10479] lo speed is unknown, defaulting to 1000 [ 230.766022][T10488] netlink: 'syz.2.1119': attribute type 3 has an invalid length. [ 230.835464][T10490] netlink: 720 bytes leftover after parsing attributes in process `syz.0.1120'. [ 230.878446][T10490] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287) [ 230.904266][T10490] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 231.471819][T10514] netlink: 'syz.3.1124': attribute type 10 has an invalid length. [ 231.567565][T10514] veth0_vlan: left promiscuous mode [ 231.572565][T10521] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 231.588850][T10514] veth0_vlan: entered promiscuous mode [ 231.596711][T10514] team0: Device veth0_vlan failed to register rx_handler [ 231.615216][T10521] ipt_ECN: cannot use operation on non-tcp rule [ 231.902314][T10479] lo speed is unknown, defaulting to 1000 [ 231.902331][T10517] lo speed is unknown, defaulting to 1000 [ 232.311942][T10550] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0 [ 232.325137][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 232.364711][T10550] geneve2: entered promiscuous mode [ 232.392544][T10550] geneve2: entered allmulticast mode [ 232.422477][ T6448] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 38042 - 0 [ 232.441513][T10506] syz.1.1117: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 232.462256][ T6448] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 38042 - 0 [ 232.476126][T10550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.502697][T10554] dvmrp0: entered allmulticast mode [ 232.527192][ T6448] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 38042 - 0 [ 232.536631][ T6441] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 38042 - 0 [ 232.647138][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.1.1117 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 232.647169][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.647181][T10506] Call Trace: [ 232.647188][T10506] [ 232.647196][T10506] dump_stack_lvl+0x189/0x250 [ 232.647229][T10506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.647253][T10506] ? __pfx__printk+0x10/0x10 [ 232.647280][T10506] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 232.647308][T10506] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 232.647336][T10506] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 232.647366][T10506] warn_alloc+0x214/0x310 [ 232.647400][T10506] ? __pfx_warn_alloc+0x10/0x10 [ 232.647436][T10506] ? __get_vm_area_node+0x28f/0x300 [ 232.647461][T10506] ? __do_replace+0xb4/0xaa0 [ 232.647484][T10506] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 232.647509][T10506] ? stack_depot_save_flags+0x40/0x900 [ 232.647561][T10506] ? translate_table+0x1b4d/0x1f90 [ 232.647601][T10506] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 232.647637][T10506] ? __do_replace+0xb4/0xaa0 [ 232.647657][T10506] vzalloc_noprof+0xb2/0xf0 [ 232.647684][T10506] ? __do_replace+0xb4/0xaa0 [ 232.647705][T10506] __do_replace+0xb4/0xaa0 [ 232.647728][T10506] ? __pfx_translate_table+0x10/0x10 [ 232.647755][T10506] ? __pfx___do_replace+0x10/0x10 [ 232.647785][T10506] ? _copy_from_user+0x94/0xb0 [ 232.647814][T10506] do_arpt_set_ctl+0xa2a/0xf10 [ 232.647838][T10506] ? __mutex_trylock_common+0x153/0x260 [ 232.647869][T10506] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 232.647894][T10506] ? rcu_is_watching+0x15/0xb0 [ 232.647937][T10506] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 232.647970][T10506] ? __pfx___mutex_lock+0x10/0x10 [ 232.647998][T10506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.648025][T10506] ? aa_sk_perm+0x81e/0x950 [ 232.648059][T10506] ? __pfx_aa_sk_perm+0x10/0x10 [ 232.648105][T10506] nf_setsockopt+0x26c/0x290 [ 232.648140][T10506] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 232.648170][T10506] do_sock_setsockopt+0x257/0x3e0 [ 232.648206][T10506] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 232.648243][T10506] ? __fget_files+0x2a/0x420 [ 232.648279][T10506] __x64_sys_setsockopt+0x18b/0x220 [ 232.648319][T10506] do_syscall_64+0xfa/0x3b0 [ 232.648346][T10506] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.648372][T10506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.648392][T10506] ? clear_bhb_loop+0x60/0xb0 [ 232.648417][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.648437][T10506] RIP: 0033:0x7f585bf8e929 [ 232.648457][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.648477][T10506] RSP: 002b:00007f58599d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.648499][T10506] RAX: ffffffffffffffda RBX: 00007f585c1b6240 RCX: 00007f585bf8e929 [ 232.648514][T10506] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 232.648527][T10506] RBP: 00007f585c010b39 R08: 0000000000000068 R09: 0000000000000000 [ 232.648540][T10506] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 232.648554][T10506] R13: 0000000000000000 R14: 00007f585c1b6240 R15: 00007ffe91b49db8 [ 232.648585][T10506] [ 232.648594][T10506] Mem-Info: [ 232.994485][T10573] netlink: 'syz.3.1140': attribute type 1 has an invalid length. [ 233.024918][T10573] x_tables: duplicate underflow at hook 1 [ 233.079931][T10506] active_anon:9652 inactive_anon:0 isolated_anon:0 [ 233.079931][T10506] active_file:1541 inactive_file:39911 isolated_file:0 [ 233.079931][T10506] unevictable:768 dirty:170 writeback:0 [ 233.079931][T10506] slab_reclaimable:12156 slab_unreclaimable:142145 [ 233.079931][T10506] mapped:37904 shmem:7236 pagetables:935 [ 233.079931][T10506] sec_pagetables:0 bounce:0 [ 233.079931][T10506] kernel_misc_reclaimable:0 [ 233.079931][T10506] free:1273534 free_pcp:14887 free_cma:0 [ 233.216940][T10506] Node 0 active_anon:40808kB inactive_anon:0kB active_file:6164kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152416kB dirty:676kB writeback:0kB shmem:28108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12620kB pagetables:3700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.287773][T10506] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.395802][T10506] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.459154][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'. [ 233.685404][T10506] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 233.737084][T10506] Node 0 DMA32 free:1162564kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58360kB inactive_anon:0kB active_file:6164kB inactive_file:157872kB unevictable:1536kB writepending:676kB present:3129332kB managed:2558272kB mlocked:0kB bounce:0kB free_pcp:36704kB local_pcp:18468kB free_cma:0kB [ 233.871200][T10506] lowmem_reserve[]: 0 0 1 1 1 [ 233.876004][T10506] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 234.025665][T10506] lowmem_reserve[]: 0 0 0 0 0 [ 234.030676][T10506] Node 1 Normal free:3896860kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22080kB local_pcp:14880kB free_cma:0kB [ 234.083418][T10506] lowmem_reserve[]: 0 0 0 0 0 [ 234.096920][T10506] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.168562][T10506] Node 0 DMA32: 3*4kB (E) 3*8kB (ME) 1*16kB (U) 2*32kB (UE) 70*64kB (U) 26*128kB (U) 21*256kB (UE) 24*512kB (UE) 9*1024kB (UM) 5*2048kB (UME) 270*4096kB (UM) = 1150964kB [ 234.207658][ T11] lo speed is unknown, defaulting to 1000 [ 234.216516][ T11] syz0: Port: 1 Link DOWN [ 234.216536][T10517] lo speed is unknown, defaulting to 1000 [ 234.223518][T10506] Node 0 [ 234.239533][T10479] lo speed is unknown, defaulting to 1000 [ 234.257288][T10506] Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 234.298699][ T9] lo speed is unknown, defaulting to 1000 [ 234.310980][T10506] Node 1 Normal: 223*4kB (UME) 48*8kB (UME) 39*16kB (UME) 110*32kB (UME) 29*64kB (UME) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 948*4096kB (ME) = 3896940kB [ 234.355511][T10506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.405900][T10506] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.466795][T10506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.506588][T10589] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1144'. [ 234.520161][T10506] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.549630][T10589] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 234.567952][T10506] 50596 total pagecache pages [ 234.572694][T10506] 0 pages in swap cache [ 234.620334][T10506] Free swap = 124996kB [ 234.647580][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1143'. [ 234.662699][T10506] Total swap = 124996kB [ 234.673666][T10506] 2097051 pages RAM [ 234.683951][T10506] 0 pages HighMem/MovableOnly [ 234.715324][T10506] 425441 pages reserved [ 234.745921][T10506] 0 pages cma reserved [ 234.994092][T10517] lo speed is unknown, defaulting to 1000 [ 235.477366][T10631] !: renamed from dummy0 [ 235.633479][T10637] tipc: Enabling of bearer rejected, failed to enable media [ 235.749885][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 236.843935][T10662] veth7: entered promiscuous mode [ 237.246648][T10683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1168'. [ 237.290075][T10683] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1168'. [ 237.314731][T10677] lo speed is unknown, defaulting to 1000 [ 237.354362][T10689] 8021q: VLANs not supported on syzkaller1 [ 237.708753][T10700] tipc: Enabling of bearer rejected, failed to enable media [ 237.764678][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1171'. [ 237.900267][T10708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1174'. [ 237.922230][T10709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1175'. [ 237.952228][T10712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'. [ 238.328088][T10677] lo speed is unknown, defaulting to 1000 [ 238.418949][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 238.687050][T10730] sit0: entered promiscuous mode [ 238.692566][T10730] sit0: entered allmulticast mode [ 238.731521][T10732] lo speed is unknown, defaulting to 1000 [ 238.895368][T10677] lo speed is unknown, defaulting to 1000 [ 238.911778][T10740] tipc: Enabled bearer , priority 10 [ 238.960121][T10740] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:20001 [ 239.005412][T10740] xt_ecn: cannot match TCP bits for non-tcp packets [ 239.140488][T10750] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 239.234994][T10750] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 239.319186][T10746] lo speed is unknown, defaulting to 1000 [ 239.595035][T10769] IPv6: syztnl1: Disabled Multicast RS [ 239.605657][T10771] __nla_validate_parse: 7 callbacks suppressed [ 239.605676][T10771] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1191'. [ 239.719902][T10732] lo speed is unknown, defaulting to 1000 [ 240.029687][ T11] tipc: Node number set to 4278255617 [ 240.183715][T10788] netlink: 'syz.2.1199': attribute type 1 has an invalid length. [ 240.228034][T10788] bond2: entered promiscuous mode [ 240.233744][T10788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.241902][T10790] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1199'. [ 240.284261][T10790] batadv1: entered promiscuous mode [ 240.289803][T10790] batadv1: entered allmulticast mode [ 240.302260][T10790] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.311676][T10790] bond2: (slave batadv1): making interface the new active one [ 240.320798][T10790] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 240.329982][T10746] lo speed is unknown, defaulting to 1000 [ 240.335910][T10732] lo speed is unknown, defaulting to 1000 [ 240.407496][T10798] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1199'. [ 240.453739][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'. [ 240.865739][T10807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.961378][T10746] lo speed is unknown, defaulting to 1000 [ 242.109400][T10852] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 242.145990][T10845] syzkaller1: entered promiscuous mode [ 242.151755][T10845] syzkaller1: entered allmulticast mode [ 242.548333][T10862] tipc: Enabling of bearer rejected, failed to enable media [ 242.786241][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.817415][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.851385][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.933624][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.175559][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 243.314372][T10897] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:0 [ 243.554132][T10908] netlink: 'syz.2.1233': attribute type 21 has an invalid length. [ 243.582823][T10908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1233'. [ 243.791492][T10924] lo speed is unknown, defaulting to 1000 [ 244.680772][T10924] lo speed is unknown, defaulting to 1000 [ 244.739589][T10915] lo speed is unknown, defaulting to 1000 [ 244.765936][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 245.143881][T10961] geneve1: entered allmulticast mode [ 245.746507][T10996] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1256'. [ 245.840813][T10924] lo speed is unknown, defaulting to 1000 [ 245.861853][T10963] lo speed is unknown, defaulting to 1000 [ 245.937068][T10915] lo speed is unknown, defaulting to 1000 [ 246.076971][T11003] veth1_to_bond: entered allmulticast mode [ 246.083682][T11003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.090978][T11003] IPv6: NLM_F_CREATE should be set when creating new route [ 246.098279][T11003] IPv6: NLM_F_CREATE should be set when creating new route [ 246.105604][T11003] IPv6: NLM_F_CREATE should be set when creating new route [ 246.146661][T11005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.175903][T11003] netlink: 168684 bytes leftover after parsing attributes in process `syz.0.1258'. [ 246.232691][T11002] veth1_to_bond: left allmulticast mode [ 246.476418][T11009] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.534332][T11009] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.653962][ T5841] IPVS: starting estimator thread 0... [ 246.664006][T11016] netlink: 'syz.4.1263': attribute type 11 has an invalid length. [ 246.769424][T11018] IPVS: using max 25 ests per chain, 60000 per kthread [ 246.893128][T11009] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.937268][T11009] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.022155][T10963] lo speed is unknown, defaulting to 1000 [ 247.028391][T10915] lo speed is unknown, defaulting to 1000 [ 247.124448][T11025] syzkaller1: entered promiscuous mode [ 247.130178][T11025] syzkaller1: entered allmulticast mode [ 247.153605][T11009] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.177099][T11009] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.295131][T11034] netlink: 'syz.4.1267': attribute type 1 has an invalid length. [ 247.331538][T11032] gretap1: entered promiscuous mode [ 247.383876][T11009] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.419111][T11036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1268'. [ 247.420334][T11009] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.429591][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 247.530353][T11036] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 247.624687][T10963] lo speed is unknown, defaulting to 1000 [ 247.975780][ T1104] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.997761][ T1104] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.115365][ T1104] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.128517][ T1104] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.200029][T11044] syzkaller0: entered promiscuous mode [ 248.208579][T11046] syz.0.1270 (11046) used greatest stack depth: 17992 bytes left [ 248.220057][T11044] syzkaller0: entered allmulticast mode [ 248.322451][ T6447] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.341474][ T6447] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.479383][T11009] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.497168][T11009] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.557590][ T6447] ================================================================== [ 248.565712][ T6447] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80 [ 248.573193][ T6447] Read of size 8 at addr ffff888028a336b0 by task kworker/u8:25/6447 [ 248.581407][ T6447] [ 248.583761][ T6447] CPU: 0 UID: 0 PID: 6447 Comm: kworker/u8:25 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 248.583789][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.583803][ T6447] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 248.583854][ T6447] Call Trace: [ 248.583863][ T6447] [ 248.583871][ T6447] dump_stack_lvl+0x189/0x250 [ 248.583897][ T6447] ? __virt_addr_valid+0x1c8/0x5c0 [ 248.583923][ T6447] ? rcu_is_watching+0x15/0xb0 [ 248.583944][ T6447] ? __kasan_check_byte+0x12/0x40 [ 248.583967][ T6447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.583987][ T6447] ? rcu_is_watching+0x15/0xb0 [ 248.584009][ T6447] ? lock_release+0x4b/0x3e0 [ 248.584030][ T6447] ? __virt_addr_valid+0x1c8/0x5c0 [ 248.584053][ T6447] ? __virt_addr_valid+0x4a5/0x5c0 [ 248.584079][ T6447] print_report+0xd2/0x2b0 [ 248.584098][ T6447] ? __mutex_lock+0x144/0xe80 [ 248.584123][ T6447] kasan_report+0x118/0x150 [ 248.584143][ T6447] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 248.584167][ T6447] ? __mutex_lock+0x144/0xe80 [ 248.584196][ T6447] __mutex_lock+0x144/0xe80 [ 248.584222][ T6447] ? __lock_acquire+0xab9/0xd20 [ 248.584241][ T6447] ? __mutex_lock+0x51b/0xe80 [ 248.584270][ T6447] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 248.584297][ T6447] ? __pfx___mutex_lock+0x10/0x10 [ 248.584327][ T6447] ? __lock_acquire+0xab9/0xd20 [ 248.584351][ T6447] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 248.584379][ T6447] ? process_scheduled_works+0x9ef/0x17b0 [ 248.584400][ T6447] ? process_scheduled_works+0x9ef/0x17b0 [ 248.584421][ T6447] process_scheduled_works+0xae1/0x17b0 [ 248.584457][ T6447] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.584487][ T6447] worker_thread+0x8a0/0xda0 [ 248.584523][ T6447] kthread+0x70e/0x8a0 [ 248.584553][ T6447] ? __pfx_worker_thread+0x10/0x10 [ 248.584575][ T6447] ? __pfx_kthread+0x10/0x10 [ 248.584600][ T6447] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.584622][ T6447] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.584645][ T6447] ? __pfx_kthread+0x10/0x10 [ 248.584673][ T6447] ret_from_fork+0x3fc/0x770 [ 248.584696][ T6447] ? __pfx_ret_from_fork+0x10/0x10 [ 248.584720][ T6447] ? __switch_to_asm+0x39/0x70 [ 248.584744][ T6447] ? __switch_to_asm+0x33/0x70 [ 248.584768][ T6447] ? __pfx_kthread+0x10/0x10 [ 248.584795][ T6447] ret_from_fork_asm+0x1a/0x30 [ 248.584838][ T6447] [ 248.584845][ T6447] [ 248.815170][ T6447] Allocated by task 11009: [ 248.819605][ T6447] kasan_save_track+0x3e/0x80 [ 248.824291][ T6447] __kasan_kmalloc+0x93/0xb0 [ 248.828900][ T6447] __kmalloc_noprof+0x27a/0x4f0 [ 248.833757][ T6447] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 248.839919][ T6447] notifier_call_chain+0x1b3/0x3e0 [ 248.845038][ T6447] register_netdevice+0x1608/0x1ae0 [ 248.850241][ T6447] nsim_create+0xae8/0xf10 [ 248.854661][ T6447] __nsim_dev_port_add+0x6b6/0xb10 [ 248.859781][ T6447] nsim_dev_port_add_all+0x37/0xf0 [ 248.864905][ T6447] nsim_dev_reload_up+0x451/0x780 [ 248.869941][ T6447] devlink_reload+0x4e9/0x8d0 [ 248.874626][ T6447] devlink_nl_reload_doit+0x9c2/0xd50 [ 248.880001][ T6447] genl_family_rcv_msg_doit+0x215/0x300 [ 248.885554][ T6447] genl_rcv_msg+0x60e/0x790 [ 248.890064][ T6447] netlink_rcv_skb+0x205/0x470 [ 248.894835][ T6447] genl_rcv+0x28/0x40 [ 248.898826][ T6447] netlink_unicast+0x75c/0x8e0 [ 248.903596][ T6447] netlink_sendmsg+0x805/0xb30 [ 248.908453][ T6447] __sock_sendmsg+0x219/0x270 [ 248.913132][ T6447] ____sys_sendmsg+0x505/0x830 [ 248.917903][ T6447] ___sys_sendmsg+0x21f/0x2a0 [ 248.922599][ T6447] __x64_sys_sendmsg+0x19b/0x260 [ 248.927541][ T6447] do_syscall_64+0xfa/0x3b0 [ 248.932056][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.937954][ T6447] [ 248.940282][ T6447] Freed by task 11009: [ 248.944350][ T6447] kasan_save_track+0x3e/0x80 [ 248.949036][ T6447] kasan_save_free_info+0x46/0x50 [ 248.954071][ T6447] __kasan_slab_free+0x62/0x70 [ 248.958842][ T6447] kfree+0x18e/0x440 [ 248.962746][ T6447] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 248.968993][ T6447] notifier_call_chain+0x1b3/0x3e0 [ 248.974110][ T6447] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 248.980525][ T6447] unregister_netdevice_queue+0x33c/0x380 [ 248.986246][ T6447] nsim_destroy+0x217/0x6a0 [ 248.990757][ T6447] __nsim_dev_port_del+0x14d/0x1b0 [ 248.995884][ T6447] nsim_dev_port_add_all+0xae/0xf0 [ 249.001004][ T6447] nsim_dev_reload_up+0x451/0x780 [ 249.006040][ T6447] devlink_reload+0x4e9/0x8d0 [ 249.010720][ T6447] devlink_nl_reload_doit+0x9c2/0xd50 [ 249.016097][ T6447] genl_family_rcv_msg_doit+0x215/0x300 [ 249.021646][ T6447] genl_rcv_msg+0x60e/0x790 [ 249.026157][ T6447] netlink_rcv_skb+0x205/0x470 [ 249.030932][ T6447] genl_rcv+0x28/0x40 [ 249.034913][ T6447] netlink_unicast+0x75c/0x8e0 [ 249.039687][ T6447] netlink_sendmsg+0x805/0xb30 [ 249.044464][ T6447] __sock_sendmsg+0x219/0x270 [ 249.049144][ T6447] ____sys_sendmsg+0x505/0x830 [ 249.053922][ T6447] ___sys_sendmsg+0x21f/0x2a0 [ 249.058688][ T6447] __x64_sys_sendmsg+0x19b/0x260 [ 249.063629][ T6447] do_syscall_64+0xfa/0x3b0 [ 249.068143][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.074037][ T6447] [ 249.076358][ T6447] Last potentially related work creation: [ 249.082090][ T6447] kasan_save_stack+0x3e/0x60 [ 249.086772][ T6447] kasan_record_aux_stack+0xbd/0xd0 [ 249.091984][ T6447] insert_work+0x3d/0x330 [ 249.096315][ T6447] __queue_work+0xbd9/0xfe0 [ 249.100835][ T6447] queue_work_on+0x181/0x270 [ 249.105428][ T6447] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 249.111064][ T6447] udp_tunnel_push_rx_port+0x17d/0x200 [ 249.116535][ T6447] geneve_offload_rx_ports+0xd7/0x160 [ 249.121924][ T6447] geneve_netdevice_event+0x6a/0x80 [ 249.127132][ T6447] notifier_call_chain+0x1b3/0x3e0 [ 249.132248][ T6447] call_netdevice_notifiers+0x88/0xc0 [ 249.137625][ T6447] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 249.143876][ T6447] notifier_call_chain+0x1b3/0x3e0 [ 249.148996][ T6447] register_netdevice+0x1608/0x1ae0 [ 249.154197][ T6447] nsim_create+0xae8/0xf10 [ 249.158617][ T6447] __nsim_dev_port_add+0x6b6/0xb10 [ 249.163736][ T6447] nsim_dev_port_add_all+0x37/0xf0 [ 249.168860][ T6447] nsim_dev_reload_up+0x451/0x780 [ 249.173896][ T6447] devlink_reload+0x4e9/0x8d0 [ 249.178581][ T6447] devlink_nl_reload_doit+0x9c2/0xd50 [ 249.183959][ T6447] genl_family_rcv_msg_doit+0x215/0x300 [ 249.189524][ T6447] genl_rcv_msg+0x60e/0x790 [ 249.194034][ T6447] netlink_rcv_skb+0x205/0x470 [ 249.198810][ T6447] genl_rcv+0x28/0x40 [ 249.202816][ T6447] netlink_unicast+0x75c/0x8e0 [ 249.207585][ T6447] netlink_sendmsg+0x805/0xb30 [ 249.212367][ T6447] __sock_sendmsg+0x219/0x270 [ 249.217058][ T6447] ____sys_sendmsg+0x505/0x830 [ 249.221833][ T6447] ___sys_sendmsg+0x21f/0x2a0 [ 249.226509][ T6447] __x64_sys_sendmsg+0x19b/0x260 [ 249.231450][ T6447] do_syscall_64+0xfa/0x3b0 [ 249.235963][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.241865][ T6447] [ 249.244190][ T6447] Second to last potentially related work creation: [ 249.250770][ T6447] kasan_save_stack+0x3e/0x60 [ 249.255471][ T6447] kasan_record_aux_stack+0xbd/0xd0 [ 249.260679][ T6447] insert_work+0x3d/0x330 [ 249.265010][ T6447] __queue_work+0xcfc/0xfe0 [ 249.269519][ T6447] queue_work_on+0x181/0x270 [ 249.274115][ T6447] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 249.279774][ T6447] udp_tunnel_push_rx_port+0x17d/0x200 [ 249.285246][ T6447] vxlan_offload_rx_ports+0x139/0x200 [ 249.290620][ T6447] vxlan_netdevice_event+0x111/0x470 [ 249.295911][ T6447] notifier_call_chain+0x1b3/0x3e0 [ 249.301032][ T6447] call_netdevice_notifiers+0x88/0xc0 [ 249.306412][ T6447] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 249.312660][ T6447] notifier_call_chain+0x1b3/0x3e0 [ 249.317776][ T6447] register_netdevice+0x1608/0x1ae0 [ 249.322980][ T6447] nsim_create+0xae8/0xf10 [ 249.327424][ T6447] __nsim_dev_port_add+0x6b6/0xb10 [ 249.332554][ T6447] nsim_dev_port_add_all+0x37/0xf0 [ 249.337672][ T6447] nsim_dev_reload_up+0x451/0x780 [ 249.342703][ T6447] devlink_reload+0x4e9/0x8d0 [ 249.347388][ T6447] devlink_nl_reload_doit+0x9c2/0xd50 [ 249.352765][ T6447] genl_family_rcv_msg_doit+0x215/0x300 [ 249.358320][ T6447] genl_rcv_msg+0x60e/0x790 [ 249.362823][ T6447] netlink_rcv_skb+0x205/0x470 [ 249.367594][ T6447] genl_rcv+0x28/0x40 [ 249.371576][ T6447] netlink_unicast+0x75c/0x8e0 [ 249.376342][ T6447] netlink_sendmsg+0x805/0xb30 [ 249.381131][ T6447] __sock_sendmsg+0x219/0x270 [ 249.385810][ T6447] ____sys_sendmsg+0x505/0x830 [ 249.390585][ T6447] ___sys_sendmsg+0x21f/0x2a0 [ 249.395261][ T6447] __x64_sys_sendmsg+0x19b/0x260 [ 249.400198][ T6447] do_syscall_64+0xfa/0x3b0 [ 249.404797][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.410691][ T6447] [ 249.413014][ T6447] The buggy address belongs to the object at ffff888028a33600 [ 249.413014][ T6447] which belongs to the cache kmalloc-256 of size 256 [ 249.427077][ T6447] The buggy address is located 176 bytes inside of [ 249.427077][ T6447] freed 256-byte region [ffff888028a33600, ffff888028a33700) [ 249.440878][ T6447] [ 249.443204][ T6447] The buggy address belongs to the physical page: [ 249.449611][ T6447] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28a32 [ 249.458384][ T6447] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 249.466884][ T6447] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 249.474780][ T6447] page_type: f5(slab) [ 249.478789][ T6447] raw: 00fff00000000040 ffff88801a441b40 ffffea0000c54f00 dead000000000003 [ 249.487374][ T6447] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 249.495963][ T6447] head: 00fff00000000040 ffff88801a441b40 ffffea0000c54f00 dead000000000003 [ 249.504634][ T6447] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 249.513306][ T6447] head: 00fff00000000001 ffffea0000a28c81 00000000ffffffff 00000000ffffffff [ 249.521978][ T6447] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 249.530643][ T6447] page dumped because: kasan: bad access detected [ 249.537063][ T6447] page_owner tracks the page as allocated [ 249.542776][ T6447] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 94514164647, free_ts 94500638122 [ 249.564149][ T6447] post_alloc_hook+0x240/0x2a0 [ 249.568937][ T6447] get_page_from_freelist+0x21e4/0x22c0 [ 249.574494][ T6447] __alloc_frozen_pages_noprof+0x181/0x370 [ 249.580311][ T6447] alloc_pages_mpol+0x232/0x4a0 [ 249.585254][ T6447] allocate_slab+0x8a/0x3b0 [ 249.589770][ T6447] ___slab_alloc+0xbfc/0x1480 [ 249.594467][ T6447] __kmalloc_noprof+0x305/0x4f0 [ 249.599340][ T6447] fib_create_info+0x1728/0x3210 [ 249.604293][ T6447] fib_table_insert+0xc6/0x1b50 [ 249.609251][ T6447] fib_magic+0x2c4/0x390 [ 249.613502][ T6447] fib_add_ifaddr+0x3fb/0x5f0 [ 249.618186][ T6447] fib_inetaddr_event+0x12e/0x190 [ 249.623220][ T6447] notifier_call_chain+0x1b3/0x3e0 [ 249.628365][ T6447] blocking_notifier_call_chain+0x6a/0x90 [ 249.634087][ T6447] __inet_insert_ifa+0xa13/0xbf0 [ 249.639025][ T6447] inetdev_event+0xfa6/0x15b0 [ 249.643737][ T6447] page last free pid 5847 tgid 5847 stack trace: [ 249.650060][ T6447] __free_frozen_pages+0xc71/0xe70 [ 249.655179][ T6447] __put_partials+0x161/0x1c0 [ 249.659863][ T6447] put_cpu_partial+0x17c/0x250 [ 249.664638][ T6447] __slab_free+0x2f7/0x400 [ 249.669060][ T6447] qlist_free_all+0x97/0x140 [ 249.673648][ T6447] kasan_quarantine_reduce+0x148/0x160 [ 249.679103][ T6447] __kasan_slab_alloc+0x22/0x80 [ 249.683956][ T6447] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 249.689421][ T6447] security_inode_alloc+0x39/0x330 [ 249.694580][ T6447] inode_init_always_gfp+0x9ed/0xdc0 [ 249.699891][ T6447] alloc_inode+0x82/0x1b0 [ 249.704239][ T6447] __sock_create+0x12d/0x9f0 [ 249.708839][ T6447] __sys_socket+0xd7/0x1b0 [ 249.713259][ T6447] __x64_sys_socket+0x7a/0x90 [ 249.717941][ T6447] do_syscall_64+0xfa/0x3b0 [ 249.722451][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.728346][ T6447] [ 249.730675][ T6447] Memory state around the buggy address: [ 249.736302][ T6447] ffff888028a33580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.744375][ T6447] ffff888028a33600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.752440][ T6447] >ffff888028a33680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.760508][ T6447] ^ [ 249.766157][ T6447] ffff888028a33700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.774302][ T6447] ffff888028a33780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.782362][ T6447] ================================================================== [ 249.827075][ T6447] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.834320][ T6447] CPU: 0 UID: 0 PID: 6447 Comm: kworker/u8:25 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 249.846575][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.856736][ T6447] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 249.864075][ T6447] Call Trace: [ 249.867359][ T6447] [ 249.870296][ T6447] dump_stack_lvl+0x99/0x250 [ 249.875016][ T6447] ? __asan_memcpy+0x40/0x70 [ 249.879608][ T6447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.884818][ T6447] ? __pfx__printk+0x10/0x10 [ 249.889424][ T6447] panic+0x2db/0x790 [ 249.893330][ T6447] ? __pfx_panic+0x10/0x10 [ 249.897762][ T6447] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 249.903666][ T6447] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.909998][ T6447] ? print_memory_metadata+0x314/0x400 [ 249.915474][ T6447] ? __mutex_lock+0x144/0xe80 [ 249.920160][ T6447] check_panic_on_warn+0x89/0xb0 [ 249.925116][ T6447] ? __mutex_lock+0x144/0xe80 [ 249.929800][ T6447] end_report+0x78/0x160 [ 249.934056][ T6447] kasan_report+0x129/0x150 [ 249.938570][ T6447] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.944471][ T6447] ? __mutex_lock+0x144/0xe80 [ 249.949165][ T6447] __mutex_lock+0x144/0xe80 [ 249.953705][ T6447] ? __lock_acquire+0xab9/0xd20 [ 249.958597][ T6447] ? __mutex_lock+0x51b/0xe80 [ 249.963290][ T6447] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 249.969544][ T6447] ? __pfx___mutex_lock+0x10/0x10 [ 249.974585][ T6447] ? __lock_acquire+0xab9/0xd20 [ 249.979447][ T6447] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 249.985528][ T6447] ? process_scheduled_works+0x9ef/0x17b0 [ 249.991254][ T6447] ? process_scheduled_works+0x9ef/0x17b0 [ 249.996984][ T6447] process_scheduled_works+0xae1/0x17b0 [ 250.002558][ T6447] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.008549][ T6447] worker_thread+0x8a0/0xda0 [ 250.013154][ T6447] kthread+0x70e/0x8a0 [ 250.017235][ T6447] ? __pfx_worker_thread+0x10/0x10 [ 250.022349][ T6447] ? __pfx_kthread+0x10/0x10 [ 250.026953][ T6447] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.032158][ T6447] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.037451][ T6447] ? __pfx_kthread+0x10/0x10 [ 250.042049][ T6447] ret_from_fork+0x3fc/0x770 [ 250.046645][ T6447] ? __pfx_ret_from_fork+0x10/0x10 [ 250.051766][ T6447] ? __switch_to_asm+0x39/0x70 [ 250.056539][ T6447] ? __switch_to_asm+0x33/0x70 [ 250.061361][ T6447] ? __pfx_kthread+0x10/0x10 [ 250.065971][ T6447] ret_from_fork_asm+0x1a/0x30 [ 250.070754][ T6447] [ 250.074118][ T6447] Kernel Offset: disabled [ 250.078441][ T6447] Rebooting in 86400 seconds..